Reptutation Services

[Mark <ad...@asarian-host.net>]

Hello,

 

Since rating.cloudmark.com stopped offering their services, I was wondering

whether someone here knows of another reliable reputation service like that?

I had such nice SA rules for it, and, now that they're gone, I miss that

functionality.

 

I still use a somewhat older SA, 3.1.6; but I found no reputation services

in the new SA, either.

 

Thanks,

 

- Mark

 

RE: Reptutation Services

[Mark <ad...@asarian-host.net>]

Thank you, Meng, for your thoughtful and extensive reply

 

It looks mighty shiny so far. :) I'll subscribe to the mailing list, too.

And I see Shevek is part of it, too, so it looks all very promising.

I hope the cost of using it won't be too prohibitive, but this looks

at least like exactly what I'm looking for.

 

And keep up the good work with SPF!

 

- Mark

 

 

 

 

 

From: Meng Weng Wong [mailto:mengwong@pobox.com] 
Sent: donderdag 13 december 2007 19:20
To: Mark
Cc: Spamassassin Mailing List
Subject: Re: Reptutation Services

 

On Dec 12, 2007, at 11:09 PM, Mark wrote:

 

Since rating.cloudmark.com stopped offering their services, I was wondering

whether someone here knows of another reliable reputation service like that?

I had such nice SA rules for it, and, now that they're gone, I miss that

functionality.

 

 

My company, Karmasphere, is building a domain reputation service, to
complement all the SPF/DKIM stuff that's happened lately.

 

In addition to reporting the direct reputation of domains, it discovers all
the nameservers, MXes, and other IPs associated with a domain, and returns a
score based on the reputation of those IPs as well.  And it does a bunch of
other stuff also.

 

Until the whitepaper is done, I can offer a sneak preview at
http://labs.karmasphere.org/demo/

 

Do look at the graphviz output to see what it's doing.  That's our
development site so it isn't running against every one of the
DNSBL/DNSWL/RHSBL/RHSWL reputation sources that we've syndicated, but it's
enough to give you the general idea.

 

Recent versions of SA do something like this, but relatively slowly; we've
written the software in Java to scale to several hundred queries a second so
ISPs can use it.

 

Since this goes beyond rsync/rbldnsd, it is difficult for us to apply the
usual model of volunteer-run mirrors.  That model tends to be painful
anyway; once a DNSBL goes into SA, it starts to get hammered.  The problem
with offering good stuff for free is that everybody uses it and then it
starts operating in the red and it goes away.  Or you end up with
"Futureproofing Spamhaus".  With that in mind, we're setting up a payment
mechanism to ensure that the service can, at the very least, not run at a
loss.  This has been consuming a lot of time so please be patient.

 

Re: Reptutation Services

[Meng Weng Wong <me...@pobox.com>]

On Dec 12, 2007, at 11:09 PM, Mark wrote:
>
> Since rating.cloudmark.com stopped offering their services, I was  
> wondering
> whether someone here knows of another reliable reputation service  
> like that?
> I had such nice SA rules for it, and, now that they're gone, I miss  
> that
> functionality.
>

My company, Karmasphere, is building a domain reputation service, to  
complement all the SPF/DKIM stuff that's happened lately.

In addition to reporting the direct reputation of domains, it  
discovers all the nameservers, MXes, and other IPs associated with a  
domain, and returns a score based on the reputation of those IPs as  
well.  And it does a bunch of other stuff also.

Until the whitepaper is done, I can offer a sneak preview at http:// 
labs.karmasphere.org/demo/

Do look at the graphviz output to see what it's doing.  That's our  
development site so it isn't running against every one of the DNSBL/ 
DNSWL/RHSBL/RHSWL reputation sources that we've syndicated, but it's  
enough to give you the general idea.

Recent versions of SA do something like this, but relatively slowly;  
we've written the software in Java to scale to several hundred  
queries a second so ISPs can use it.

Since this goes beyond rsync/rbldnsd, it is difficult for us to apply  
the usual model of volunteer-run mirrors.  That model tends to be  
painful anyway; once a DNSBL goes into SA, it starts to get  
hammered.  The problem with offering good stuff for free is that  
everybody uses it and then it starts operating in the red and it goes  
away.  Or you end up with "Futureproofing Spamhaus".  With that in  
mind, we're setting up a payment mechanism to ensure that the service  
can, at the very least, not run at a loss.  This has been consuming a  
lot of time so please be patient.