ORBS publishing delay

[Rodney Tillotson <]

(was: Minutes of RIPE 36 Anti-spam WG)

At 10:42 23/05/2000, Paul Mansfield wrote:

 > > Evidence of spammers using ORBS information (ORBS scanning seen,
 > > then relay attempts). This points to a serious leak from ORBS.

 > I presume therefore that people believe that ORBS are not in fact
 > holding back data for thirty days?

What we heard at the WG meeting was a report of relay attempts
following probes almost immediately.

This may indeed mean that the delay is short.
Another possibility (which neither I nor anyone else thought of at
the time) is that the victim failed to spot the first probes before
the thirty-day period, and was talking about a re-test shortly
before publishing.

Rodney.