SpamHaus DROP list

[Hugo van der Kooij]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kai Schaetzl wrote:
> Michael Mansour wrote on Tue, 16 Oct 2007 07:57:46 +1000 (EST):
> 
>> I've never had complaints from anyone from getting blocked from those IP's, since 
> they are IP's which have been hijacked.
> 
> Rather in complaints I'd be interested if it is worth it. Do you (=anyone reading 
> this thread) have any idea how many of your Zen hits (assuming you use Zen) are in 
> this subset?

I put my filter in front of other blacklists. And I did notice some hits
since I started this. Like:

Oct 17 00:16:21 balin postfix/smtpd[16000]: NOQUEUE: reject: RCPT from
host105.200-117-38.telecom.net.ar[200.117.38.105]: 554 5.7.1 Service
unavailable; Client host [200.117.38.105] blocked using
zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=200.117.38.105;
from=<augu at bmm.com.my> to=<haasje at vanderkooij.org> proto=ESMTP
helo=<kayzerzo-75400e>
Oct 17 01:16:34 balin postfix/smtpd[29159]: NOQUEUE: reject: RCPT from
unknown[196.204.154.39]: 554 5.7.1 Service unavailable; Client host
[196.204.154.39] blocked using zen.spamhaus.org;
http://www.spamhaus.org/query/bl?ip=196.204.154.39;
from=<deanhostager at affiliates.x10.com> to=<hvdkooij at vanderkooij.org>
proto=SMTP helo=<clum>

I guess they would propably be shot on ERS (Trend Micro RBL) or on ZEN.

Hugo.

- --
hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
	Don't meddle in the affairs of sysadmins,
	for they are subtle and quick to anger.

Bored? Click on http://spamornot.org/ and rate those images.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFHFetZBvzDRVjxmYERAocxAKCD7JstGb0SOK2G4CcHtgMgyUYwKQCeKmfw
0yNeLroOgNgdBo1EvZQinQ0=
=3TaV
-----END PGP SIGNATURE-----