Advertisement
Promo

Online business Toolkit

War on spam turns to open proxies

Matt Loney ZDNet.co.uk

Published: 02 Jan 2004 16:55 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Anti-spam site Spamhaus has added a new feature to its services which should, it says, help ISPs and companies cut out more spam from arriving at their servers.

The Exploits Block List (XBL) is a database of IP addresses that originate 'illegal' third party exploits, according to Spamhaus, such as open proxies. The term "open proxy" refers to the situation when a server allows network connections from anyone, to anywhere, on arbitrary ports and with arbitrary protocols. It means that spammers, for instance, can use that server to send spam without it being traced back to them. Connections made via open proxies are often non-accountable, since the open proxy server may be doing no logging, or if logging is being done, logs may be unavailable to those investigating network incidents.

The XBL list should also help block worms and viruses with built-in spam engines, and other types of Trojan-horse exploits utilised by spammers, said Spamhaus in a statement.

XBL is designed to sit alongside the Spamhaus Block List (SBL), which blocks incoming spam from direct spam sources. It incorporates the SBL, and system administrators can set their mail servers' anti-spam DNSBL feature (sometimes called "Blacklist DNS Servers" or "RBL servers") to query xbl.spamhaus.org. The service is provided free of charge.

"The combination of SBL and XBL enables ISPs to safely reject a high volume of incoming spam outright, without needing to accept it into their mail queues for processing," said Spamhaus. "This enables the use of further slower post-receipt spam filters to process a vastly reduced volume of remaining spam."

Rejected messages generate instant feedback to the sender via the standard SMTP rejection (bounce) message, giving reason for rejection and providing information about what to do about it. "This differs from post-receipt spam filter systems which accept all email and then silently discard or route to a trash mailbox email identified as spam without the sender knowing," said Spamhaus.

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
70 out of 131 people found this useful


Company/Topic Alerts

Create a new alert from the list below:




Sentry Posts Blog

Met will not reopen phone hack investi...

The Metropolitan Police will not reopen its investigation into alleged phone hacking by the News of the World. In a press statement delivered outside Scotland Yard on Thursday, Assistant... More

Post a comment

FUD over ChromeOS's security already?

It hasn't taken long for the security vendors to wake to the potential of Google's new ChromeOS. The potential that is, to create FUD – fear uncertainty and doubt. In a release today,... More

Post a comment

Feds take DDoS in their stride

The US Department of Homeland Security has said that a series of distributed denial-of-service attacks began on US government networks on 4 July. However, Amy Kudwa, deputy press... More

Post a comment

Video icon

Video

Google Chrome

Roundup: Full coverage of Google Chrome

The search giant has launched a beta of its own open-source browser, sending a clear challenge to Microsoft in the way it lets users work with applications More

Blog: Google Chrome has Microsoft's code inside, says MS manager

And furthermore, he says, that's a good thing... More

Blog: Google Chrome — nine things we've found since launch

Google must be very happy with the coverage Chrome has gathered. But it's not all good news... More


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters