Feeds

Dutch ISP calls the cops after Spamhaus blacklists it

Had to unfriend TPB chums to get unblocked

Top 5 reasons to deploy VMware with Tegile

Dutch ISP A2B Internet has filed a complaint with the police after it claimed to have been "blackmailed" by London-based anti-spam outfit Spamhaus.

A2B managing director Erik Bais told Webwereld (report in Dutch) that Spamhaus "has gone too far".

The Spamhaus Project is an international organisation, founded by Steve Linford in 1998, dedicated to tracking email spammers and spam-related activity. It is responsible for a number of widely used anti-spam DNS-based block lists (DNSBLs). Many ISPs use these services to reduce the amount of spam they take on.

Spamhaus put in a request to block all data traffic from German ISP Cyberbunker, aka CB3ROB, best known for helping out torrent site The Pirate Bay. But Cyberbunker has several server racks with a partner of A2B. A2B, as an upstream provider, refused to block the full IP range of Cyberbunker and decided to block only one particular IP address that Spamhaus had identified as a source of spam.

According to Bais, Spamhaus then decided to include the full IP range of all of A2B's customers in its block list. Several companies were practically offline as a result and couldn’t send or receive email.

Finally A2B gave in and decided to remove Cyberbunker from its BGP (border gateway protocol) list, used for exchanging routing information between gateway hosts. Almost immediately, A2B could resume its normal duties. "Spamhaus cannot be its own judge," Bais told Webwereld.

Several years ago, Spamhaus used similar tactics when it put Austrian Registry Nic.at on its block list. Spamhaus demanded that the Austrian Registry delete 15 domains that the spam-blockers considered to be used by phishers, without providing enough evidence to satisfy Nic.at. Nic.at responded that — because of Austrian law — it could not simply delete domains without proof of bogus WHOIS addresses.

A2B director Erik Bais told Webwereld: "I will certainly raise this issue at the next RIPE [Réseaux IP Européens, or European IP Networks] meeting."

Spamhaus's Steve Linford said: "To say that an SBL listing amounts to extortion is the same as being refused entry to a restaurant because you're not properly dressed, and then claiming that you are being blackmailed." ®

Internet Security Threat Report 2014

More from The Register

next story
'Kim Kardashian snaps naked selfies with a BLACKBERRY'. *Twitterati gasps*
More alleged private, nude celeb pics appear online
Home Depot ignored staff warnings of security fail laundry list
'Just use cash', former security staffer warns friends
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Snowden, Dotcom, throw bombs into NZ election campaign
Claim of tapped undersea cable refuted by Kiwi PM as Kim claims extradition plot
Freenode IRC users told to change passwords after securo-breach
Miscreants probably got in, you guys know the drill by now
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
BitTorrent's peer-to-peer chat app Bleep goes live as public alpha
A good day for privacy as invisble.im also reveals its approach to untraceable chats
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.