[TriLUG] Semi OT - phishing emails and spoofed domain links

[ac via TriLUG]

On Wed, 19 Jul 2017 23:13:43 -0700
Thomas Delrue <delrue.thomas at gmail.com> wrote:
> On 07/19/2017 10:46 PM, ac via TriLUG wrote:
> > You can check the reputation of the sending ip number, here:
> > 
> >  http://multirbl.valli.org/  
> 
> Now /that/ is an interesting link. Thanks for sharing!
> (something something rsk may find this interesting too)
> 

also, RBL, DNSBL, DNSWL, etc has become a science as there are various
policies that interact with each other, as the policies change, so
should the listing score on filters... (to be effective - or at least
have a range of effectiveness)

as an example: SORBS 30/180/365 listings have different rules, not just
on the time that passed, but requirements for removal, requirements for
listing, cross point and in/egress rep, as well as a multitude of other
factors (vectors) - all which combine (result) in a proposed number range.
some resources (non responsive/recurring) have become 'trash" (or junk)
as they cannot be removed, even upon re-assignment...If you operate
email servers and you calculate your score assignments even within
moderate accuracy you do not get any spam...

Andre