-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, 2021-01-21 at 17:07 +0000, Gregory Heytings via mailop wrote:
> > > One concrete example: AS16276 has 3583744 IPs.  Out of these, 2327 sent 
> > > a spam in the last 7 days according to uceprotect.  That might seem 
> > > like a high number, but it's only 0.05% of the address space of that 
> > > AS. Because of this all IPs of AS16276 are blacklisted.
> > 
> > 2327 IPs from that ASN sent spam in 7 days, and you are hear arguing 
> > that is OK?!?
> > 
> 
> 2327 out of 3583744.  Are you saying that only 0% is okay?  We do not live 
> in a perfect world, errors happen, that's unavoidable.

I don't look at the 3583744, I look at the 2327.  How many emails can
those 2327 IPs send in 1 hour?  That's a lot of spam.

> 
> > The a few things that make those 4 providers good are 1) They act on 
> > abuse reports, 2) they block outbound port 25 by default, and 3) they 
> > require real ID.
> > 
> 
> As I said, none of these things are enough.  You can act on abuse reports, 
> block outbound port 25, and require real ids, and yet see honest customers 
> being hacked.

But that is not enough.  If you have honest customers getting hacked
then you have an obligation to all other ASNs to promptly and swiftly
disengage and deactivate those honest customers.  What level 3
uceprotect is saying is that AS16276 did not act swiftly and promptly
and festered for days culminating in 2327 honest customer IPs sending
spam.

- -Jim P.
-----BEGIN PGP SIGNATURE-----
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=TmFe
-----END PGP SIGNATURE-----

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to