Re: dns-blacklist false positive? (list.quorum.to)

[David Fifield <david () bamsoftware com>]

On Fri, Mar 09, 2012 at 11:53:18AM -0800, David Fifield wrote:
> I get this when running dns-blacklist against scanme.nmap.org:
>
> Host script results:
> | dns-blacklist:
> |   SPAM
> |_    list.quorum.to - SPAM
>
> But I did a search using their web interface at
> http://www.quorum.to/pubsearch, and they have no record of
> scanme.nmap.org.

According to http://www.quorum.to/publicbl.html, a host not in their
database is "blocked because it has never been seen to send mail." Maybe
we should remove this list then? It's going to report SPAM for virtually
all IP addresses.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/