Team Cymru / Spamhaus
Matthias Leisi
matthias at leisi.net
Fri Jun 27 21:04:51 UTC 2014
On Fri, Jun 27, 2014 at 10:40 PM, Jon Lewis <jlewis at lewis.org> wrote:
>> We're a little more leery about trying Spamhaus's BGPf service (DROP,
>> EDROP
>> and BCL,
>>
>> http://www.spamhaus.org/bgpf/
>
>
> This is more about stopping spam from entering your network and stopping
> compromised hosts on your network from becoming active in botnets (by
> cutting off their command and control).
Not quite.
DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic"
lists, consisting of netblocks that are "hijacked" or leased by professional
spam or cyber-crime operations (used for dissemination of malware,
trojan downloaders, botnet controllers). The DROP and EDROP lists are
a tiny subset of the SBL, designed for use by firewalls and routing
equipment to filter out the malicious traffic from these netblocks.
(Source: http://www.spamhaus.org/drop/, linked from the URL quoted above)
-- Matthias
More information about the NANOG
mailing list