On Fri, Jun 27, 2014 at 10:40 PM, Jon Lewis <jlewis@lewis.org> wrote:
We're a little more leery about trying Spamhaus's BGPf service (DROP, EDROP and BCL,
This is more about stopping spam from entering your network and stopping compromised hosts on your network from becoming active in botnets (by cutting off their command and control).
Not quite. DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic" lists, consisting of netblocks that are "hijacked" or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers). The DROP and EDROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks. (Source: http://www.spamhaus.org/drop/, linked from the URL quoted above) -- Matthias