logo
home - calc - FAQ - download - doc - irc - links - credits - contact

Spamcalc F.A.Q.

What is dnsspam?
Why did you make this script?
How does it work?
What is the threshold for a dnsspam host?
Does it calculate all dnsspam?
What if it decides a hierarchical host is dnsspam?
What exactly is the goal of your script?
Does your script also calculate ipv6 spam?

Electric Actuators
Electric actuators from LINAK add movement and value to your product

What is dnsspam? In short, hostnames should be hierarchical. Something like computer.subdomain.domain.tld. Wasting ip space to create reverse just to 'look cool' on IRC (because there really is no other service/place on the internet where your reverse is shown) is therefore called dns pollution or dnsspam. You can find a more extensive explanation on www.dnsspam.nl or on this site.

Why did you make this script? Read the answer to that question in the history of the script.

How does it work? Here is the algorithm of the script.

What is the threshold for a dnsspam host? If a hostname scores 0-49 points, it is considered to be a normal hostname. If it scores 50-99 points, it could be dnsspam and is therefore considered to be possible spam (the script will give a warning). If the score is 100 or more, the hostname is spam.

Does it calculate all dnsspam? Of course it doesn't. There are many hostnames of which a human would find it hard to decide whether it is dnsspam or a hierarchical hostname, or hostnames that some people think are dnsspam, and other people think perfectly normal. This script is just a helping hand in finding dnsspam more easily.

What if it decides a hierarchical host is dnsspam? This is a very very bad thing, of course. I have taken many precautions to try to make sure that this does not happen. And so far I have not found a hierarchical hostname that scores 100 or more. A few examples:
14 - port-213-61-45-64.ber.dial.de.colt.net
0 [whitelisted] - 1Cust197.tnt1.richmond.va.da.uu.net
0 [whitelisted] - pc1-shep1-4-cust169.not.cable.ntl.com
0 [whitelisted] - 0-1pool230-2.nas19.philadelphia1.pa.us.da.qwest.net
0 [whitelisted] - 209-122-217-112.s112.tnt1.atn.pa.dialup.rcn.com
0 [whitelisted] - cpe.atm0-0-0-1321093.0x3ef29916.virnxx4.customer.tele.dk

What exactly is the goal of your script? Most importantly, that it will never give a hierarchical hostname 100+ points. And secondly, to find as many dnsspam hostnames as possible.

Does your script also calculate ipv6 spam? Ah, you must be referring to things like 2001:c001:dead:beef:cafe:babe or similar ipv6 ips. No, my script calculates hostnames only.