Until such time as we have the data, we can't know if it would be useful or not.
Such a list would need exclusions (both globally and locally, much like the PBL for instance), and "Well-Known" NAT IPs would be excluded as well. But I've seen far too much abuse coming from Colocation facilities of dubious reputation for far too long. Aloha, Michael. -- Michael J Wise | Microsoft | Spam Analysis | "Your Spam Specimen Has Been Processed." | Got the Junk Mail Reporting Tool ? -----Original Message----- From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Dave Warren Sent: Tuesday, August 30, 2016 5:06 PM To: mailop@mailop.org Subject: Re: [mailop] How many more RBL's do we really need? On Tue, Aug 30, 2016, at 15:22, Michael Peddemors wrote: > On 16-08-30 12:43 PM, Michael Wise via mailop wrote: > > We could use one to call out the location of colo servers that should never > > be connecting on port 443, for instance. > > Um, I can think of a reason why that might not be perfect.. For > instance cloud services which monitor your email box for you.. Or web servers that shouldn't ever be calling out on 443, at least, until we install a new gizmo that does and it doesn't work. Or my mail server, which should never call out on 443, except that now we use Cyren's spam/AV stuff, which does. Still, it would be nice if there was a way to identify what type of traffic/behaviour is expected of an IP, when a commercially run web server starts attacking, it would be nice to know I can safely block 443 whereas I can't do that if it's a carrier grade NAT outbound IP. Unfortunately I suspect maintaining such a list would be resource prohibitive, and/or the data would be too low quality to be useful. _______________________________________________ mailop mailing list mailop@mailop.org https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fchilli.nosignal.org%2fcgi-bin%2fmailman%2flistinfo%2fmailop&data=02%7c01%7cmichael.wise%40microsoft.com%7c07c7ecf1281a4f7a8af408d3d133cc46%7c72f988bf86f141af91ab2d7cd011db47%7c1%7c0%7c636081992800710183&sdata=i0gXVO30064%2fxQNRy8pEeFTxErR0%2fBH27u%2fqDI%2feBY4%3d _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
