Free Newsletters
InfoWorld Daily

InfoWorld
Log-in | Register

Blacklists: The new neighborhood watch

E-mail blacklist operators turn the Internet into a gated community

By Tom Yager  
July 18, 2003
 

The dnsbl (DNS-based blacklist) concept is simple. By default, mail servers are configured to accept all incoming connections; DNSBL-enabled mail servers can put each connection on hold and consult one or more blacklists. If the sender’s IP address is blacklisted, the mail server has the option of hanging up on the sender before the questionable mail is received.

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

DOWNLOAD REPORT 
 

Looking for this InfoWorld Special Report in one complete, printable format? Download it for free.

>> Special Report: Canning spam 

 




Operators of DNSBLs, including spews.org, spamhaus.org, and spamcop.com, feel the best way to stop spam is: Keep spammers from connecting to targeted mail servers in the first place. Users are not inconvenienced, and bandwidth is conserved. Blacklisted senders can deliver no e-mail whatsoever to servers or recipients that block blacklisted addresses. It seems like an ideal solution.

But blacklists have been controversial from the jump. Humans have to maintain the blacklists, just as humans manage the lists of URLs blocked from sensitive (or working) eyes with Web filters. Blacklists are therefore subjective, and opponents argue that the DNSBL arbiters are activists who brand harmless and valid e-mail as spam. Blacklists are maintained partly by consensus — subscribers to the lists submit candidates for inclusion — but in the end, someone has to decide whether a suspect is guilty or innocent.

By unfortunate necessity, the brush used to tar spammers is awfully wide. If you do find yourself erroneously blacklisted, you can plead your case to the list maintainers via e-mail or an automated Web site. They’ll remove your address range from the list if you are listed improperly. Of course, it takes longer to get removed than it does to get listed.

If you innocently swim in the same pond as a spammer, the only way to get clear is to have your Internet provider kick the spammer off its network. Blacklist maintainers’ systems immediately notify affected providers of new listings on their network. Most providers don’t want spammers on their service, and the blacklists help them focus their investigations.

Refusing connections from blacklisted addresses is purely voluntary; blacklists have no effect on mail servers that don’t consult the lists. Almost all open-source Unix mail servers, including the popular Postfix and Sendmail, can consult the blacklists with simple configuration changes. Commercial mail software either includes blacklist support or offers it as an add-on — MDaemon, for example, is a commercial server with standard blacklist support — and several vendors sell spam filtering for Microsoft Exchange.

In truth, most blacklist users simply mark e-mail from blacklisted senders as suspect but still deliver it. Marked messages can then be discarded by users themselves. In the end, it’s their choice.





 


 
Tom Yager is chief technologist at the InfoWorld Test Center.

  More of Tom Yager's column
  Tom Yager's Weblog

Newsletter Check out all of our free newsletters!
Enter e-mail address:




 

TOP NEWS:


»  Four quick tips for choosing an IM security product
71 percent of businesses will invest in real-time messaging this year. If you're one of them, be sure to protect your enterprise

»  Forrester analysts ID hot IT jobs
Research group finds 16 IT roles with a promising future

»  Nvidia claims 10 hours of HD video on Tegra chip
The Tegra 600 and 650 can be used with hard disk drives and are designed partly for mobile Internet devices

»  Database vendors add Google's MapReduce
Greenplum and Aster Data Systems will support Google's programming technique, developed for parallel processing of large data sets across commodity hardware

»  Network management: Tips for managing costs
New technologies, changing requirements, and ongoing equipment maintenance and upgrades cost money, but there are ways to manage expenses

»  EMC targets SMBs, branch offices with new low-end storage
Celerra NX4 highlights include thin provisioning, snapshot technology for data recovery and backups, and Web-based console for management of storage volumes




VIRTUAL MACHINES: SUN'S XVM VIRTUALIZATION PORTFOLIO
This Webinar discusses how software companies and IT organizations can leverage virtualization and management technologies from Sun and VMLogix to consolidate lab infrastructure and automate build and test processes so that software can be delivered more quickly, cost-effectively and reliably. Sponsored by Sun

»  Click here to view this Webcast
  Enterprise Data Security Solutions Guide
Data security used to be about outside threats. These days the biggest challenge for data-driven organizations is the management of secure information from the inside out. Data is available on laptops, your network and even USB devices, but not always secure. Read this Solutions Guide to learn the best ways to keep it safe. Sponsored by ISC2

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 

FIND PRODUCTS AND COMPANIES
» COMPLETE PRODUCT GUIDE



TECHNOLOGY INDEX
• Applications
• Application Development
• Security
• Networking
• Wireless
• Platforms
• Hardware
• Data Management
• Storage
• Web Services
• Business
• Telecom
• Professional Services
• Standards

TECH WATCH 


What's the 411 on GOOG-411?
Just as Google has become synonymous with "performing a Web search," 411 is understood to mean "information" -- as in "what's the 411?" I was thus surprised to discover, from a billboard, no less, that the king of search is taking on the ...

Apple HTML source reveals 'iPhone Extreme'
"This one's a stretch..." reports AppleInsider. Um, yeah. Reporting on HTML code sightings of product names could be called a stretch, but iPhone Extreme has a ring to it. Now, that sounds like the product Apple should have released first, rather ...

COLUMNISTS

Unified under law
Ephraim Schwartz's Column and Blog (InfoWorld) - In the litigious world we live in, deploying a unified communications platform in your enterprise could...
» MORE COLUMNISTS

MORE INFOWORLD BLOGS


Open Sources 
Product Management
When I joined MySQL four years ago, there was quite a lot of debate about product management. We didn't actually have ...

Zero Day 
Botnet herders tending smaller flocks
New research backs up the theory that botnet operators are keeping their networks smaller in a continued effort to keep ...



• Advice Line
• Database Underground
• The Deep End
• Enterprise Mac
• Geeks in Paradise
• Grid Meter
• The Gripe Line
• InfoWorld Daily
• Inside IT
• IT Troubleshooter
• ITXtreme
• Open Sources
• ProdBlog
• Real World SOA
• Reality Check
• Security Adviser
• SMB IT
• The Storage Network
• Tech Watch
• Virtualization Report
• Zero Day

ADVERTISEMENT


RESOURCE CENTERadvertisement 

GOVERNMENT IT & POLICY
'If you don't go after the network, you're never going to stop these guys. Never.'
From the State Department, All the News for Inquiring Minds
TechPresident, the Internet Citizenry's New Consensus Taker



Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist