[Mimedefang] IP reputation data collection

David F. Skoll dfs at roaringpenguin.com
Thu Jan 28 15:57:26 EST 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, all,

For the last couple of months, we've been running an experimental system
in conjunction with a large CanIt customer to collect and aggregate IP
address reputation data.  We're looking for MIMEDefang users who want
to help us collect data; what you'd get in return would be access to
the aggregated results in RBLDNSD zone file format.

We have a standalone Perl module for reporting events back to us.  To
use it, you'd instrument your MIMEDefang filter with calls to various
types of event reporting, such as "host x.y.z.w sent something we
marked as spam" or "host x.y.z.w attempted to send to an invalid recipient."

The reports go out in UDP and are fairly low-bandwidth; the overhead is about
5 bytes for each IPv4 report and 17 for each IPv6 report.

Anyway... if you're interested in contributing, please contact me
off-list.

Regards,

David.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFLYfo1wYQuKhJvQuARApN+AJ940fXKAl5Xy8W58WQzGu691/ZqoACeOIuk
NHQtL5r2CEjihsHg8OoaC00=
=fLmm
-----END PGP SIGNATURE-----



More information about the MIMEDefang mailing list