Go to content Go to menu Go to search

IP Reputation blacklist

This project on GitHub: IPRep

This is an IpReputation project. Is inspired by http://www.chaosreigns.com/iprep/.
Unfortunately iprep project by chaosreigns seems dead (at least I don't get any feedback from project founder), so I started my own project for my purposes.

Main purpose of the project is improve spamassassin accuracy (decreasing count of false-positives and false negatives).

How I achieved this:
System counts spam and ham messages for each originating IP, and calculates reputation by following formula:
reputation = 100*ham_count / (ham_count+spam_count)

All data are stored in mysql database.
Calculated reputation is provided to spamassassin thru dnsbl mechanism, and spamassassin sets appropriate scores.

So, if I don't got spam from one particular IP, the reputation for this IP equals 100.
And if I got spam and only spam from IP, the reputation would be 0.

In dns reply the last octet is used to show score.
For example IP 198.21.7.133 has reputation 100, and IP's 98.101.243.50 reputation is zero:

$ host 133.7.21.198.iprep.propertyminder.com
133.7.21.198.iprep.propertyminder.colo has address 127.0.0.100

$ host 50.243.101.98.iprep.propertyminder.com
50.243.101.98.iprep.propertyminder.colo has address 127.0.0.0

This system is running in production on my server.
You can check system status here: Iprep Status Page
If you wish to use my running instance of the iprep as dnsbl, or if you would like to connect to the project to feed data, please write me to <this project name>@valynkin.ru.


при публикации материалов с данного сайта обратная ссылка на сайт обязательна.
valynkin.ru © no rights reserved