logoalt Hacker News

someonebaggy • today at 1:41 PM • 3 replies • view on HN

All of the spam blocklists are like this.

At one time quite recently, Cloudflare was on Spamhaus's "Don't Route Or Peer" list. Imagine where the world would be if anyone cared about that list.

But if an entire ISP is blocking you based on UCEPROTECT, which is designed for email spam filters - are you sure? An ISP that blocked all of DO would get so many complaints and be open to so much legal liability. Usually these are only used for email filtering.


Replies

john_strinlai • today at 2:49 PM

>At one time quite recently, Cloudflare was on Spamhaus's "Don't Route Or Peer" list.

it was only 2 /23's (only 1024 IPs, ASN14061 is 3,140,680 IPs), and was resolved without a monthly subscription in ~24 hours after being posted to the NANOG mailing list

https://lists.nanog.org/archives/list/[email protected]/...

➕ show 1 reply
ttul • today at 4:31 PM

Spamhaus does not offer the ability to pay for removal. UCEPROTECT is uniquely evil in insisting on payment. It's a good thing that their lists are not widely used, so, in practice, it doesn't matter if your IPs are listed by them. Their revenue comes from unwitting victims who don't know any better.

➕ show 1 reply
goldenmember • today at 1:57 PM

I disagree. Normally you can reach out to request delisting, and it's free.

As I explained, Orange's security filter seems to automatically block requests at the DNS level if your website's domain resolves to an IP listed on UCEPROTECT Level 3. In this case, that appears to be the entire DigitalOcean ASN.

➕ show 1 reply