On 6 Apr 2016, at 10:48, Quanah Gibson-Mount wrote:
Is anyone familiar with this RBL and its quality? Not a whole lot of
info at <http://bad.psky.me/about/>. Terms seem probably ok
<http://bad.psky.me/terms/>.
Not trustable: in blackhat vs. whitehat terms: nowhere to put a hat)
1. Not clearly the responsibility of any human or corporate entity of
any reputation of any sort.
2. They have illegitimately appropriated the "RBL" trademark originally
registered to MAPS and still used by Trend Micro, owner of all of the
old MAPS IP (and when last I dealt with them, even some vintage 2000
MAPS operational assets...)
3. Bogus domain registration info.
4. Apparently reliant on a tiny number of commodity "cloud" VPS's for
everything: web, base domain DNS, and DNSBL DNS.
5. Weird DNS formal structure. Wildcard SOA for *.bad.psky.me but no
matching wildcard NS, which could lead to corner-case breakage, because
they don't return NXDOMAIN for *ANY* query. Evidence of DNS
incompetence, not what you want in a DNSBL operator.
6. Use of providers (NameCheap & Digital Ocean) that are notable as
recently preferred providers of professional snowshoe spammers.
This doesn't mean that their data is bad, but unlike the Spamhaus lists
or even the tragically shoddy Trend Micro versions of the RBL and other
MAPS lists, it's clear that bad.psky.me is run by someone lacking a
range of resources (courage, technical skills, cash, integrity, etc.)
needed to merit trust in a DNSBL.
