>>>>> "Tor" == Tor Slettnes <tor@???> writes:
Tor> The HTML version can bee viewed online at:
Tor> http://slett.net/spam-filtering-for-mx/
For instance, a rDNS lookup against "sbl-xbl.spamhaus.ort" returns
127.0.0.2 for IP addresses that are believed by the SpamHaus staff
to directly belong to spammers and their providers, and a 127.0.0.4
response for addresses belonging to (Windows) machines that are
known to be infected with a mass-mailing Trojan virus or worm. If an
IP address fulfills both of these criteria, the rDNS lookup yields
127.0.0.6.
(s/.ort/.org/)
Not true; 127.0.0.6 returned from XBL or SBL-XBL means that that the IP
is listed on the OPM proxy list (which is imported into XBL).
If an IP is listed on more than one of SBL, CBL, OPM then the SBL-XBL
lookup returns multiple A records.
--
Andrew, Supernews
http://www.supernews.com
