Jump to content

Open Relay Behavior-modification System

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by ErikWarmelink (talk | contribs) at 15:18, 3 June 2007 (Lawsuits: Actrix (ISP)). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Open Relay Behavior-modification System (ORBS) was one of the first DNS-based Blackhole List (DNSBL), a means by which an internet domain may publish a list of IP addresses, in a database which can be easily queried automatically by other computer programs on the Internet. The ORBS list was used to blacklist IP addresses that were open mail relays, third-party mail servers through which spammers can relay their messages and thus attempt to obfuscate the source of the spam[1].

Controversy

ORBS was controversial because at the time many people felt running an open relay was acceptable[citation needed], and that the way ORBS scanned[citation needed] the Internet for open mail servers could be abusive. ORBS used probes to test for open relays without permission, sometimes over and over again. Some claimed that testing of their networks continued even after they asked ORBS to stop, others claimed that relayed spam didn't stop either. Those that blocked testing or engaged in legal action against ORBs were listed, whether they had open relays or not[1]. In some cases the tests interfered with mail servers, causing delays, especially when those servers were assigned hundreds of IP addresses. Another complaint was that open relays that had never sent spam[citation needed] were listed without notice. Claims of false listings, true or not, were also a problem.[2] A website was created in 2001 by Brad Baker called stoporbs.org, to offer assistance to other[citation needed] mail administrators who had been listed on the ORBS blacklist for reasons other than open relays.

Lawsuits

ORBS was created and run by Alan Brown in New Zealand. It was shut down in 2001 due to Brown's health and money issues and two lawsuits brought by companies listed on ORBS, Xtra and Actrix, which he had refused to remove.[3] The companies were listed by ORBs because they blocked its probes[1] and they kept relaying spam. Brown was forced to sell his Internet service provider, Manawatu Internet Services, to cover expenses, and to state that the companies had been listed inappropriately[3].

Brown also had a defamation lawsuit brought against him, O'Brien v Brown. The court ruled that Brown made defamatory comments about Patrick O'Brien, CEO of Domainz, which is the .nz domain registrar. The comments were made in the Domainz discussion group. When Brown was offered a chance to apologize, he made additional defamatory comments. Following O'Brien's victory and the awarding of $42,000 to him, Brown claimed that his net worth was only $500, which he said is why he did not have a lawyer[4]

Aftermath

Several groups had cached the lists, retested the open relays, and replaced ORBS. Running an open relay became even a bigger problem than before. DNSBLs listing open relays got so effective that spammers shifted to insecure proxy servers.

References