Hi Gang

I am part of the SWINOG Anti-Spam Blacklists team which are used by a
handfull of swiss ISP.

Very early, we also started adding IPv6 addresses to the blacklist but
soon noticed that there is a potential problem with IPv6 and wildcard
entries.

Let's assume 2.0.0.0/24 is full of abusers and you decide to throw their
whole /24 in the Blacklist:

*.0.0.2.dnsbl.example.org 300 in TXT "Bunch of abusers, /24 listed"

This would wrongfully block an awful lot of IPv6 addresses!

To avoid this issue, we use two different dns zones:

*.0.0.2.dnsbl.example.org 300 in TXT "Bunch of abusers, /24 listed"

*.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.dnsbl.example.org in TXT
"Spamer /64 listed"

Well, but now I need to tell SpamAssassin to only query IPv4 addresses
on the first zone and only query IPv6 addresses on the ip6 one.

I was not able to find a way to achieve this. Did I overlook something?

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________

Reply via email to