Slashdot Mirror
Reputation Lookup for IPs
xzap writes "ZDNet is running an article about TrustedSource.org which is a new portal that provides reputation information for IP addresses. It can be used to configure your spam filters or when deciding whether to add an unknown host to your blacklist. Dmitri Alperovitch, a research engineer at CipherTrust said "Often companies don't realize that they have zombie machines on their network that have been sending e-mail. It may be more helpful for organizations to identify which systems on their networks are sending e-mail." Users can drill down to find more information on each domain. The portal is an initiative of CipherTrust who have previously been covered on Slashdot."
Why on earth should lots of machines be able to send email from inside a corporation? Surely some smarthosts and block port 25 at the border routers is the way to go. Then a check of the logs can give you clues as to which machines are compromised.
wow I thought my spelling was bad...
I don't get it....if a system admin is active enough to look at this page and cross reference with his/her network. Do you think it's likely that it's the same people who actually are also active enough to carefully monitor their traffic to notice a spam bot?
of course this page would be more useful especially for everybody else... but at first glance at the summary I started to scratch my head and wonder why exactly somebody would make this.
Losers whine about their best, Winners go home to fuck the prom queen
Doesn't most of spam zombies use dynamic ip address? Then this is useless... Even worse, you can get an ip wich have been used by a zombie and this system will think you're too.
A list of Tor server IP's:
http://proxy.org/tor.shtml
Some people are bound to abuse TOR by simply being dickheads over it, comment spamming, flaming, trolling, etc.
But the benefits of a system that protects your right to free speech totally outweighs the negative.
If those dickheads negatively tarnish the Tor servers such that they become less valuable due to being second class citizens on the internet... then it is a really really bad idea.
Protect firstly that which you have, then see what you need to do to stop spammers, dickheads in general, etc.
Yes, we DO want to talk about reputation lookup for IPs.
The hurricane is horrible, for sure. It is very tragic that so many people are losing so much. I would pray for them. However, slashdot is NOT the place to discuss a hurricane.
Slashdot is technology news, not general news. If you want to submit a story about the hurricane, and it gets posted, I would gladly "get some priorities" and discuss that instead. Until then, such a discussion is flagrantly off topic.
Just because there's a disaster doesn't mean the rest of the world stands still. Life goes on, and hopefully gets better.
News for Nerds is news for nerds, not news for the south.
to accept the praise of personal wisdom is an affront to the very ideal i hold dear.
Being from a country that is considered a hotspot for spam, I naturally appreciate any effort to eradicate spam, BUT blacklists take things too far. They don't seem very effective and only serve to irritate and inconvenience people who have done nothing wrong and are using their IPs for only legitimate purposes.
This especially effects smaller ISPs and hosting providers, who get slammed despite in al ot of cases being able to prove that no spam was originating from their network and that htey have secure servers. These blacklist operators have automated systems checking the "vulnerability" of networks and adding IPs willy-nilly. This has a negligible effect on actual spammers, since they will just hop to another network when a network they are using gets blacklisted. It's almost like the gun control system in Canada, only worse since it is automated in addition to being highly inaccurate and ineffective. This new system smells too much like a hyped-up, buzzword-added blacklist for my liking.
Liberal Ontarians and French Quebecers are draining Western Canada's wealth. Stop them now! Support Western separatism.
... you should use reputation of the AS (autonomous system). An AS is a group of IP addresses that are owned (generally) by the same entity.
There may be billions of IP addresses, but not that many ASes.
I started to write a spamassassin plugin that would track the spamminess of email by AS - haven't finished yet.
Proof please.
Ironport is a fine company that makes a GREAT product.
Senderbase is *not* pay to play (prove to me otherwise), and it's widely used by their C-series appliances.
And it characterizes a lot more than just quantity of mail; there are other factors that go into an SBRS (Senderbase Reputation Score) as well.