>Marc skrev den 2023-09-15 17:01: >>Anyone have any experience with a dns blacklist specific to known smtp >>auth abuse?
On 15.09.23 17:51, Benny Pedersen wrote: >spamrats ? > >https://www.spamrats.com/
I have bad experiente with spam rats and thus wouldn't recommend using them. YMMV of course.
On 15.09.23 21:57, Marc wrote:
You could be right about this. When I compare the last 413 failed smtp auths, none are listed in auth.spamrats.com. While bl.spamcop.net lists 230 at 127.0.0.2, while zen.spamhaus.org gets 371 at 127.0.0.4/127.0.0.3/127.0.0.11. I just have to check which of them is not a list that lists any 'dynamic' ip by default.
zen is not good idea for auth too. It's supposed to contain dynamic IPS which aren't used for spaming.
authbl from spamhaus should do that. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. - Holmes, what kind of school did you study to be a detective? - Elementary, Watkins. -- Daffy Duck & Porky Pig
