Repeated Blacklisting / IP reputation

Joe Greco jgreco at
Wed Sep 9 11:46:18 UTC 2009

> bmanning at wrote:
> >  sounds like domain tasting to me.
> Oops!  Oh yeah.  Spammer gets an allocation...
> "Well, if that netblock was clean before, it sure isn't now!  May I 
> please have another?"
> Lather, rinse, repeat.

THAT would probably be easy enough to detect; RIR simply checks to see 
if new DNSBL entries had appeared, and refuses to trade in the block if
any do.

You may need a few more refinements too.

I don't think it's technically unworkable, if tackled correctly.  But it
also leaves some questions, such as what ARIN is expected to do with the
toxic wastelands left behind by spammers.

... JG
Joe Greco - Network Services - Milwaukee, WI -
"We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again." - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.

More information about the NANOG mailing list