SpamDB Suggestions

Fighting spam by finding and listing Exploitable Servers.

Not Logged in

Login Register

General

Database Check

Help & Support

Home Page

Mailing Lists

SORBS News

Privacy Policy

SORBS Submissions

Using SORBS

Want to help..?

Listing & Delisting

Dynamic IP FAQ

(De)Listing Overview

Proxy Retest FAQ

Relay Retest FAQ

Spam Database FAQ

Vulnerability FAQ

Zombie Netblock FAQ

FAQs and Information

DNS Primer

End User Info

General Q & A

Open Proxy Info

Open Relay Info

SSL Certificates

Securing Mailservers

Spam Fighting FAQ

Sponsor Info

Wiki

Support Request FAQ

Additional Menu

SORBS Admin

Mail/Contact Form

Nemesis BBS

SORBS Projects

SORBS Webmail

iSux Admin

iSux Homepage

iSux Projects

iSux Webmail

Webmail

Make the listings last 1 month and then expire them automatically if there is no more spam

SORBS says this is not a good idea, as this will cause great pain to large ISPs, and individual users will not have a great problem, as most have dynamic addresses. Also it would be easy for a spammer with a grudge against an ISP to get them listed and with a strong policy as no delisting for 7 days or a month or any other effective period it would be a problem for both the ISP and SORBS.

Yellow card/Red card system, where a host is listed on the second spam

Well 2 things wrong here...

This is about delisting, not listing...
With dynamic IP space (that is not already listed in the SORBS DUHL) the spammer will have an awful lot of space to abuse before being stopped.

Exponential Listing, where listings get longer and longer....

This is similar to the fixed listing period in that it penalises larger organistations, particually ISPs.

For those that don't know what this type of process is consider the following spam counts and listing times:

1 day
2 days
4 days
1 week
2 weeks
1 month
2 months

As you can see 7 spams (possibly from different customers) would possibly land an ISPs mailserver in SORBS for 2 months.....

Employ different rules for end-users, companies, and ISPs

NO!

Why should SORBS treat ISPs companies and end-users differently?

Some ISPs out there couldn't care less if they have spammers on their network, so long as they get their money. Well hey, newsflash: ISPs you are responsible for your users actions. If you can't handle that, why are you an ISP?.....

Why should Endusers, Companies and ISPs have different rules? Sure they have different responsibilities, but that is no excuse for allowing their users to send spam.

SORBS appreciates that ISPs could fall into a different category, which is why it feels the de-listing policy should be able to be applied to all users, both large and small.

A good example of why ISPs should be considered differently is that ISPs can kick spammers off their network but still end up in SORBS. The end user is either a spammer, or not. The ISP might be hit by a spammer sending mail through its systems, kick off the spammer, but still be listed in SORBS.

So what's the answer....?

Well, SORBS and it's admins don't know, which is the reason for this page and the request that you the user put forward some suggestions.

If you have some ideas mail them to Matthew and they will be evaluated and put on this page.

If you believe one of the listed examples should be implemented mail Matthew.

If you feel that the current SORBS de-listing rules are ok, please mail that preference as well.....