On 2011/02/17 9:23 AM, Andreas Schulze wrote:
Hello,
http://www.spamhaus.org/faq/answers.lasso?section=DROP FAQ
mention as very last point to use the Spamhaus Drop list with SA.
is anybody doing this and can explain it in detail ?
I played around with this a number of years ago and found it fairly
useless in the context of blocking spam. The DROP list isn't meant to
be used in such a way because this address space isn't typically the
actual source of spam. Instead, the space is more likely used to
control botnets, run scans, DOS attacks and other day-to-day operations.
The DROP list is best used on routers running BGP in an effort to stop
everything prior to a spam run.
--
/Jason