I was somewhat surprised to read in Chris Linfoot's blog that he uses SORBS ,because I've always considered the top-level dnsbl.sorbs.net blocklist a little too aggressive. (Considering that I use SPEWS,this may be a little bit of throwing rocks in glass houses.)

(Update: Chris Linfoot does say that you need a goodwhitelist to use SORBS.)

Out of curiosity I decided to get a very broad sense of the potential'false positive' rate for using dnsbl.

It's time for the first weekly spam summary of the new year, so let'ssee what sort of a start 2006 is off to.

This week we received 14,639 email messages from 198 different IPaddresses. Our SMTP server handled 30,023 sessions from 3,122different IP addresses. Message volume is up some since last week (not surprising with peoplecoming back to work) and session volume is holding steady.

Connection

I spent today reading up on Sunscreen, the Solaris 9 bundled IPfiltering system. It's been interesting, partly because Sunscreen'sbuilt around a different packet matching model than I'm used to, anduses a great deal of different terminology (for example, what I thinkof as 'transparent bridging' is called 'stealth mode').

Sunscreen doesn't actually match packets as such. Instead you define'services', for which you specify some combination of destinationand/or source ports