{"id":828,"date":"2014-05-02T17:53:50","date_gmt":"2014-05-02T08:53:50","guid":{"rendered":"http:\/\/blog.kitakore.asia\/?p=828"},"modified":"2014-05-02T17:53:50","modified_gmt":"2014-05-02T08:53:50","slug":"spamhaus%e3%81%aexbl%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6%e3%83%86%e3%82%ad%e3%83%88%e3%82%a6%e3%81%ab%e7%bf%bb%e8%a8%b3%e3%81%97%e3%81%a6%e3%81%bf%e3%81%9f","status":"publish","type":"post","link":"https:\/\/blog.kitakore.asia\/?p=828","title":{"rendered":"Spamhaus\u306eXBL\u306b\u3064\u3044\u3066\u30c6\u30ad\u30c8\u30a6\u306b\u7ffb\u8a33\u3057\u3066\u307f\u305f"},"content":{"rendered":"

\u4ed5\u4e8b\u3067\u7ba1\u7406\u3059\u308b\u30e1\u30fc\u30eb\u304cSpamhaus<\/a>\u306eXBL<\/a>\u306b\u30d6\u30ed\u30c3\u30af\u3055\u308c\u308b\u3053\u3068\u304c\u6700\u8fd1\u5ea6\u3005\u3042\u3063\u3066\u3001\u3057\u304b\u3082BL\u5165\u308a\u3059\u308b\u539f\u56e0\u304c\u3088\u304f\u308f\u304b\u3089\u306a\u304b\u3063\u305f\u306e\u3067Spamhaus\u306eXBL\u306e\u8aac\u660e\u6587\u3092\u82f1\u8a9e\u3055\u3063\u3071\u308a\u306e\u81ea\u5206\u306a\u308a\u306b\u7ffb\u8a33\u3057\u3066\u307f\u305f\u3002<\/p>\n

Why was my IP listed in the XBL?<\/span><\/strong>
\n\u3069\u3046\u3057\u3066\u79c1\u306eIP\u304cXBL\u306b\u30ea\u30b9\u30c8\u5165\u308a\u3055\u308c\u3061\u3083\u3046\u306e?<\/p>\n

When mail is received to one of XBL’s feeds, the connection is analyzed automatically to determine if the connecting machine is either an open proxy or a spam-sending Trojan Horse.<\/span>
\n\u30e1\u30fc\u30eb\u304cXBL\u306e\u88c5\u7f6e\u306e1\u3064\u306b\u53d7\u4fe1\u3055\u308c\u308b\u3068\u3001\u63a5\u7d9a\u3057\u3066\u304d\u305f\u30de\u30b7\u30f3\u304c\u30aa\u30fc\u30d7\u30f3\u30d7\u30ed\u30ad\u30b7\u3084\u30b9\u30d1\u30e0\u3092\u9001\u308b\u30c8\u30ed\u30a4\u306e\u6728\u99ac\u306b\u611f\u67d3\u3057\u3066\u308b\u30de\u30b7\u30f3\u3058\u3083\u306a\u3044\u304b\u3092\u5224\u65ad\u3059\u305f\u3081\u306b\u3001\u81ea\u52d5\u7684\u306b\u305d\u306e\u63a5\u7d9a\u3092\u5206\u6790\u3059\u308b\u3088\u3002<\/p>\n

If so, the IP Address is immediately added to Spamhaus’ XBL blocklist.<\/span>
\n\u3082\u3057\u3082\u63a5\u7d9a\u3057\u3066\u304d\u305f\u30de\u30b7\u30f3\u304c\u305d\u308c\u3089\u3067\u3042\u308b\u306a\u3089\u3070\u3001\u305d\u306eIP\u30a2\u30c9\u30ec\u30b9\u306f\u76f4\u3061\u306bSpamhaus\u306eXBL\u306e\u30d6\u30ed\u30c3\u30af\u3059\u308b\u30ea\u30b9\u30c8\u306b\u5165\u308c\u308b\u3088\u3002<\/p>\n

XBL only lists single IP address, and only when the spam\/virus\/trojan connects directly to its feed’s servers, not when an intermediate,
\nnon-infected-MTA connects, nor due to a virus being bounced by a legitimate MTA (“backscatter”).<\/span>
\nXBL\u306f1\u3064\u306eIP\u30a2\u30c9\u30ec\u30b9\u3060\u3051\u3092\u30ea\u30b9\u30c8\u306b\u5165\u308c\u308b\u3088\u3002\u3042\u3068\u3001\u30ea\u30b9\u30c8\u5165\u308a\u3044\u3059\u308b\u306e\u306f\u30b9\u30d1\u30e0\u3084\u30a6\u30a3\u30eb\u30b9\u3084\u30c8\u30ed\u30a4\u304c\u76f4\u63a5\u5224\u5b9a\u88c5\u7f6e\u306e\u30b5\u30fc\u30d0\u306b\u63a5\u7d9a\u3057\u3066\u304d\u305f\u3068\u304d\u3060\u3051\u3067\u3001
\n\u7d4c\u7531\u30b5\u30fc\u30d0\u3084\u3001\u611f\u67d3\u3057\u3066\u306a\u3044MTA\u3084\u3001\u6b63\u5f53\u306aMTA\u304c\u30a6\u30a3\u30eb\u30b9\u30e1\u30fc\u30eb\u306b\u5bfe\u3059\u308b\u30d0\u30a6\u30f3\u30b9\u3092\u8fd4\u3057\u305f\u7d50\u679c(\u3044\u308f\u3086\u308b\u5f8c\u65b9\u62e1\u6563\u30e1\u30fc\u30eb\u306d)\u306a\u3093\u304b\u306f\u30ea\u30b9\u30c8\u5165\u308a\u306e\u8981\u56e0\u306b\u306f\u306a\u3089\u306a\u3044\u3088\u3002<\/p>\n

IP addresses, that host URLs with executable virus\/trojan content in emails sent from XBL’d addresses, will also be added due to the very strong likelihood that this is also a trojan infected machine.<\/span>
\nXBL\u306b\u30ea\u30b9\u30c8\u5165\u308a\u3055\u308c\u305f\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u9001\u3089\u308c\u308b\u30e1\u30fc\u30eb\u306b\u8a18\u8f09\u3055\u308c\u305f\u3001\u5b9f\u884c\u53ef\u80fd\u306a\u30a6\u30a3\u30eb\u30b9\u3084\u30c8\u30ed\u30a4\u306e\u5185\u5bb9\u3092\u542b\u3080URL\u306e\u30db\u30b9\u30c8\u3067\u3042\u308bIP\u30a2\u30c9\u30ec\u30b9\u3082\u307e\u305f\u3001\u30c8\u30ed\u30a4\u306b\u611f\u67d3\u3057\u305f\u30de\u30b7\u30f3\u3067\u3042\u308b\u53ef\u80fd\u6027\u304c\u3081\u3063\u3061\u3083\u9ad8\u3044\u304b\u3089\u3001\u30ea\u30b9\u30c8\u306b\u52a0\u3048\u308b\u3088\u3002
\n(example.com\u304cXBL\u306e\u30ea\u30b9\u30c8\u5165\u308a\u3057\u3066\u3044\u308b\u5834\u5408\u3001example.com\u3092URL\u3068\u3057\u3066\u8a18\u8f09\u3057\u305f\u30e1\u30fc\u30eb\u3092\u9001\u3063\u305f\u9001\u4fe1\u5143IP\u30a2\u30c9\u30ec\u30b9\u3082\u30ea\u30b9\u30c8\u5165\u308a\u3057\u3061\u3083\u3046\u3088\u3001\u3063\u3066\u3053\u3068\u3002)<\/p>\n

For the same reason, IP addresses that connect to our botnet C&C sinkhole servers will also be added.<\/span>
\n\u540c\u69d8\u306e\u7406\u7531\u3067\u3001\u3046\u3061\u3089\u306e\u300cbotnet C&C sinkhole(\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u307f\u305f\u3044\u306a\u3082\u306e\uff1f)\u300d\u306b\u63a5\u7d9a\u306b\u6765\u305fIP\u30a2\u30c9\u30ec\u30b9\u3082\u30ea\u30b9\u30c8\u306b\u52a0\u3048\u308b\u3088\u3002<\/p>\n

Most IP addresses are listed as a result of directly sending spam or viruses to the CBL system’s detectors (spamtraps, special addresses which do not belong to any real users, and which receive only spam) or by initiating SMTP transactions that look similar to viruses or botnet-proxies.<\/span>
\n\u307b\u3068\u3093\u3069\u306eIP\u30a2\u30c9\u30ec\u30b9\u306f\u3001CBL\u30b7\u30b9\u30c6\u30e0\u306e\u63a2\u77e5\u6a5f(\u5b9f\u30e6\u30fc\u30b6\u304c\u4e00\u4eba\u3082\u3044\u306a\u3044\u7279\u5225\u306a\u30a2\u30c9\u30ec\u30b9\u3067\u3001\u30b9\u30d1\u30e0\u3060\u3051\u3092\u53d7\u4fe1\u3059\u308b\u30b9\u30d1\u30e0\u30db\u30a4\u30db\u30a4\u3060\u3088)\u306b\u30b9\u30d1\u30e0\u3084\u30a6\u30a3\u30eb\u30b9\u3092\u76f4\u63a5\u9001\u3063\u3061\u3083\u3063\u305f\u308a\u3001\u30a6\u30a3\u30eb\u30b9\u3084BOT\u30cd\u30c3\u30c8\u30d7\u30ed\u30ad\u30b7\u306a\u3093\u304b\u3068\u540c\u3058\u3088\u3046\u306a\u611f\u3058\u306b\u898b\u3048\u308bSMTP\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u3092\u958b\u59cb\u3059\u308b\u3053\u3068\u306b\u3088\u3063\u3066\u30ea\u30b9\u30c8\u306b\u8ffd\u52a0\u3055\u308c\u308b\u3088\u3002<\/p>\n

Other feeds of spam-sending exploited systems may be added, but only if they meet Spamhaus quality standards.<\/span>
\n\u307e\u3041\u3046\u3061\u3089\u306e\u54c1\u8cea\u57fa\u6e96\u3092\u6e80\u305f\u3057\u3061\u3083\u3063\u305f\u5834\u5408\u306b\u306f\u3001\u30b9\u30d1\u30e0\u9001\u4fe1\u306b\u5229\u7528\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u306e\u4ed6\u306e\u88c5\u7f6e\u9054\u3082\u30ea\u30b9\u30c8\u306b\u52a0\u3048\u3089\u3061\u3083\u3046\u304b\u3082\u306d\u3002<\/p>\n

(XBL formerly included data from the RSL , BOPM & NJABL blocklists , which no longer exist ) .<\/span>
\n(XBL\u306f\u4ee5\u524d\u306fRSL\u3084BOPM\u3001NJABL\u30d6\u30e9\u30c3\u30af\u30ea\u30b9\u30c8\u306a\u3093\u304b\u306e\u30c7\u30fc\u30bf\u3082\u30a4\u30f3\u30af\u30eb\u30fc\u30c9\u3057\u3066\u4f7f\u3063\u3066\u305f\u3093\u3060\u3051\u3069\u3001\u4eca\u306f\u3082\u3046\u306a\u304f\u306a\u3063\u3061\u3083\u3063\u305f\u3057\u306d\u3002)<\/p>\n

If the IP belongs to a NAT gateway\/firewall system, Spamhaus strongly recommends blocking all outgoing port 25 traffic from machines on your network not configured and maintained specifically as mailservers.<\/span>
\n\u3082\u3057\u3082\u305d\u306eIP\u30a2\u30c9\u30ec\u30b9\u304cNAT\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3084\u30d5\u30a1\u30a4\u30e4\u30fc\u30a6\u30a9\u30fc\u30eb\u30b7\u30b9\u30c6\u30e0\u306e\u914d\u4e0b\u306b\u3042\u308b\u3093\u306a\u3089\u3001\u660e\u78ba\u306b\u30e1\u30fc\u30eb\u30b5\u30fc\u30d0\u3068\u3057\u3066\u8a2d\u5b9a\u3084\u30e1\u30f3\u30c6\u30ca\u30f3\u30b9\u3092\u3057\u3066\u3044\u306a\u3044\u30de\u30b7\u30fc\u30f3\u304b\u3089\u9001\u51fa\u3055\u308c\u308b\u3001\u3042\u3089\u3086\u308b\u5916\u90e8\u306e25\u756a\u30dd\u30fc\u30c8\u3078\u306e\u901a\u4fe1\u3092\u30d6\u30ed\u30c3\u30af\u3059\u308b\u3053\u3068\u3092\u3001\u3046\u3061\u3089\u306f\u5f37\u304f\u63a8\u5968\u3059\u308b\u3088\u3002<\/p>\n

A single infected machine sending spam out through a NAT can result in blocked mail form the whole LAN.<\/span>
\n\u30a6\u30a3\u30eb\u30b9\u306b\u611f\u67d3\u3057\u305f\u305f\u3063\u305f1\u53f0\u306e\u30de\u30b7\u30f3\u304cNAT\u3092\u901a\u3063\u3066\u30b9\u30d1\u30e0\u3092\u9001\u3063\u3061\u3083\u3046\u3053\u3068\u3067\u3001\u7d50\u679cLAN\u4e0a\u306e\u5168\u90e8\u306e\u30de\u30b7\u30f3\u306e\u30e1\u30fc\u30eb\u9001\u4fe1\u304c\u30d6\u30ed\u30c3\u30af\u3055\u308c\u3061\u3083\u3046\u3053\u3068\u306b\u306a\u308b\u304b\u3089\u306d\u3002<\/p>\n

See CBL ‘s FAQ for more information .<\/span>
\n\u8a73\u7d30\u306fCBL\u306eFAQ\u3092\u898b\u3066\u306d\u3002<\/p>\n

 <\/p>\n

\u3046\u30fc\u3093\u3001\uff72\uff78\uff85\uff72URL\u3092\u542b\u3080\u30e1\u30fc\u30eb\u306e\u9001\u4fe1\u5143\u3082\u30d6\u30ed\u30c3\u30af\u3059\u308b\u3088\u3001\u3063\u3066\u306e\u304c\u602a\u3057\u3044\u306a\u3041\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u4ed5\u4e8b\u3067\u7ba1\u7406\u3059\u308b\u30e1\u30fc\u30eb\u304cSpamhaus\u306eXBL\u306b\u30d6\u30ed\u30c3\u30af\u3055\u308c… Read more ><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[10],"tags":[11],"class_list":["post-828","post","type-post","status-publish","format-standard","hentry","category-10","tag-linux"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p5gvuF-dm","_links":{"self":[{"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=\/wp\/v2\/posts\/828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=828"}],"version-history":[{"count":11,"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=\/wp\/v2\/posts\/828\/revisions"}],"predecessor-version":[{"id":839,"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=\/wp\/v2\/posts\/828\/revisions\/839"}],"wp:attachment":[{"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.kitakore.asia\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}