Re: dsbl.org SERIOUS problem

John E. Malmberg wrote:
> According to postings on the archives of the dsbl.org mailing lists, the 
> systems with browsers that they get to relay mail are going on the 
> "multihop" list, not the main one.
Unfortunately this does not seem to be the case.
We have a host around which has only "ftp-url/dsbl.org website hit" as 
listing reason at DSBL and is listed both in unconfirmed and singlehop, 
but not in multihop.

Listed in unconfirmed (unconfirmed.dsbl.org): yes
Listed in singlehop (list.dsbl.org): yes
Listed in multihop (multihop.dsbl.org): no


> It might have been more useful if DSBL would create a new zone for this 
> exploit.  Of course then it would be more likely that this zone would be 
> used for directly blocking mail, since as pointed out earlier, the 
> multihop list is already too aggressive for that.
Exactly. The idea is not that bad, but adding it to their main zones is, 
uhm, maybe not the best thing to do - especially when the advisory about 
the bug was released at the time this feature was added to the dsbl 
website with no vendor notification or any possibility of reaction to it 
besides changing browsers. And the 23rd of december is for sure the best 
date for such things anyway.

-- 
Andreas Jakum