spam and CIDR blocks

Mailman List Mirror (Read Only)
1

Jon Lewis boldly claimed:

> because of lack of response by the spam sites. What is going to happen
> when the spammers find that they are unable to reach 30% of their mailing
> list because of null0 routes? The spam sites just renumber into another

Are there still spammers that don't use "innocent" relays to spread their
junk? As long as there are reachable relaying servers somewhere on the
net, the spammers have nothing to worry about.

  Yes.

  freerelay.cyberpromo.com
  freerelay2.cyberpromo.com
  freerelay3.cyberpromo.com

> network. Eventually the spam sites, or their upstream provider, will have
> to request more addresses from Arin, and this is where we might be able to
> gain another tool to fight spam.
How many spam houses have their own CIDR blocks? Not having looked, I'd
guess few if any.

  Not many.. only the big ones. If you're going to get into denying
address space to anyone that can justify it, because of their line of work,
you're getting into a very large sticky issue, which is seperate from
spamming, which is ip assingment policy.

  The problem is that any sort of blacklist maintained by more than
one person in their spare time gets into very sticky legal issues, and should
not be touched here on nanog.

2

> Are there still spammers that don't use "innocent" relays to spread their
> junk? As long as there are reachable relaying servers somewhere on the
> net, the spammers have nothing to worry about.

  freerelay.cyberpromo.com

Cyberpromo must work both ways then. I've gotten spams recently that
originated at cyberpromo but were relayed through any number of unrelated
sites across the world.

> How many spam houses have their own CIDR blocks? Not having looked, I'd
> guess few if any.

  Not many.. only the big ones. If you're going to get into denying

Do any really? I'd be amazed if cyberpromo could justify enough IP's to
get a globally routable CIDR block. As was already mentioned, having
large blocks of IP's that are nearly unusable because they are in so many
blacklists should obviously not be a valid "use" of IP space, and should
not be justification for getting more space.

  The problem is that any sort of blacklist maintained by more than
one person in their spare time gets into very sticky legal issues, and should

Depends on how you maintain, distribute, and talk about it.