IPv6 black lists?
Marco d'Itri
md at Linux.IT
Wed Mar 10 01:37:12 CET 2010
On Mar 10, Dave Taht <d at teklibre.org> wrote:
> So this translates out to 2^16*5 = 327680 detected spams to get
> completely blocked for someone that gets a /48 allocation from some
> tunneling provider or another. While I suppose the virbl method will
> work for random zombie machines which can't change their ip addresses,
> it's not going to slow down a dedicated abuser all that much.
Like it happens for IPv4, I expect that different DNSBLs (or their
components) will adopt different approaches at complimentary upgrades
of listings depending on what kind of sources they target.
> I tend to think that changing the relevant RFC (sorry, can't remember
> which one) for exchanging email to require a valid certificate for email
> exchanged over ipv6 would be more effective in that case.
This is clearly a FUSSP, one of the main botnets already uses TLS.
--
ciao,
Marco
More information about the ipv6-ops
mailing list