I-monopoly, ukusetshenziswa kabi kwamandla nokuzicabangela wena noma ukusiza olwandle logaxekile? Abamele izinkampani ze-inthanethi ezimbalwa bakhulume nentatheli yezobuchwepheshe u-Lars "Ghandy" Sobiraj ukuze baxoxe ngephrojekthi ye-Spamhaus eyimpikiswano. Ukuhlaziya okushintshiwe ngezansi kokusikiwe.
Obani abakwaSpamhaus Project
Ukusesha okusheshayo ku-inthanethi kuveza ukuthi i-Spamhaus iyinhlangano yamazwe ngamazwe engenzi nzuzo eyasungulwa ngo-1998. Kodwa-ke, ngokusho kwe-CIO yangaphambili (funda: isikhulumi) yenkampani, u-Richard Cox, i-Spamhaus yi-British Limited Company. Ngesikhathi sokushicilelwa kwengxoxo noCox (2011), ihhovisi elikhulu likaSpamhaus laliseGeneva. Kodwa-ke, lonke ulwazi mayelana nenkampani luyaphikisana, aluhambisani futhi luyimfihlakalo.
U-Sven Olaf von Kamphuis (obizwa kamuva ngokuthi SOvK), omunye wabasunguli be-Cyberbunker, ukhuluma ngo-Spamhaus ngendlela engathandeki kakhulu. Ngokusho kwakhe, uMnu. Cox useneminyaka engaphezu kuka-20 engasebenzi, uma ngabe lo muntu ekhona. Lo msebenzi kuthiwa ulawulwa nguMnuz Stephen John Linford nomkakhe uMyra Peters kuphela. Ngaphezu kwalokho, njengoba i-SOvK iphakamisa, izinhlangano ezingenzi nzuzo ngokuvamile azidingi ukuba khona e-Seychelles noma e-Mauritius. Umsunguli we-Cyberbunker naye akaqondi ukuthi kungani izintatheli eziningi kangaka zithanda le phrojekthi - imboni yezindaba yiyona ebhekene nezinkinga ezihlobene ne-Spamhaus. Lonke ulwazi oludluliswa yiphrojekthi kokushicilelwe kobuchwepheshe ngokuvamile lushicilelwa ngaphandle kokuqinisekiswa, i-SOvK iyaqhubeka.
I-akhawunti ye-Twitter ye-Spamhaus Project, cishe abalandeli abangu-4000
Ijaji nomakhi wesahlulelo kumuntu oyedwa ngaphandle kwanoma yiliphi igunya elingokomthetho lokwenza lokho
Yini ebamba iso lakho ngokushesha: kungakhathaliseki ukuthi umsebenzi wenkampani ubaluleke kangakanani futhi unengqondo, iphrojekthi ye-Spamhaus ayinaso isisekelo esingokomthetho semisebenzi yabo. Ngaphezu kwalokho, imisebenzi yabo ayikaze igunyazwe ngokusemthethweni uhulumeni noma iziphathimandla ezinekhono: I-SOvK igxile eqinisweni lokuthi uSpamhaus akalona ngisho ilungu le-RIPE (i-Réseaux IP Européens ingumlawuli waseYurophu obhekene nokubhaliswa nokusabalalisa izinsiza I-inthanethi). Kodwa-ke, emazweni angaphandle, umbono uwukuthi i-Spamhaus iwuhlobo "lwamaphoyisa e-inthanethi", kuyilapho, uCampuis eveza, inkampani ngokwayo "idinga ukunakwa ngamaphoyisa." Uthi futhi ukushicilelwa kwedatha eningi kuwebhusayithi ye-Spamhaus akukho emthethweni futhi kwephula amalungelo okuvikela idatha. Ukushicilelwa kwalo lonke ulwazi mayelana nogaxekile kuphrojekthi kufanele kunqatshelwe. Inkinga, ngokusho kwe-SOvK, ukushicilelwa kwedatha yomuntu siqu kuRejista Yemisebenzi Eyaziwayo Yogaxekile (ROKSO). Le datha kufanele ivikelwe njengolunye ulwazi lomuntu siqu, ingasaphathwa eyokuthi okuqukethwe kusizindalwazi se-Spamhaus bekungatholakali ngaso sonke isikhathi ngokusemthethweni.
Isikhundla sikaRoskomndazor ku-Spamhaus eRussiaNgendlela, mayelana nokuba semthethweni kwemisebenzi yephrojekthi. Kusuka ngezincazelo eziphathelene noSpamhaus waseRoskomnadzor kulandela ukuthi imisebenzi yabo eRussia Federation ayikho emthethweni:
Ngaphandle kokufaka isiza kwiRejista ngesisekelo soMthetho Wezolwazi, isinqumo senkantolo noma imininingwane yesivumelwano nobhalisile (umsebenzisi) wezinsizakalo zokuxhumana ngocingo nezinye izizathu zokukhawulela ukufinyelela kusayithi (inethiwekhi) ( kufaka phakathi isicelo senkampani ye-Spamhaus), I-telecom operator ayinayo.
Uma u-opharetha we-telematics ngokungekho emthethweni ekhawulela ukufinyelela kuwebhusayithi (inethiwekhi) kobhalisile (umsebenzisi) wezinsizakalo zokuxhumana nge-telematic, izenzo zomqhubi zizoqukatha izimpawu zokwephulwa kwenkontileka nobhalisile.
Kwenzeka kanjani: I-Cyberbunker ngokumelene "namaphoyisa e-inthanethi"
Ngo-2013, ukungqubuzana phakathi kokusingatha iwebhu ngaphansi komhlaba i-Cyberbunker kanye no-Spamhaus kwanda. I-Spamhaus, eyayizinze e-Switzerland ngaleso sikhathi, yabeka i-Cyberbunker ohlwini lwayo lwabavinjelwe ngenxa yemisebenzi engabazekayo yamakhasimende ayo futhi yakwenza kwaba sesidlangalaleni. Ngemva kwalokhu, ukuhlasela kwe-DDoS okukhulu kakhulu emlandweni we-inthanethi kwenzeka: I-Spamhaus.org yahlaselwa udoti wedijithali ngesivinini esingu-75 Gbps. Ngenxa yomthamo wayo, lokhu kuhlasela kuthiwa kuphazamise kafushane ukugcwala kwewebhu emhlabeni jikelele. Ngo-April 2013, umsolwa, u-SOvK, owayehlala eSpain ngaleso sikhathi, wavakashelwa amaphoyisa endawo. Amakhompiyutha, izinto zokugcina izinto kanye nomakhalekhukhwini bomuntu ohlonzwe umshushisi njengoMnuz K. kwathathwa.
Iphrojekthi ye-Spamhaus yincwadi enezimpawu eziyisikhombisa
Ngaphandle kwecala le-Cyberbunker, sizamile ukuthola ukuthi iyini ngempela iphrojekthi ye-Spamhaus, ngoba akucaci olwazini olukuwebhusayithi yabo. Kuze kube manje, imibuzo ethunyelwe ekhelini labezindaba ayikazitholi izimpendulo kusukela ngasekupheleni kukaJanuwari 2020. UMnu Campuis uthi i-Spamhaus yayinenkampani eyodwa engenzi nzuzo elinganiselwe okwakukhulunywe ngayo ngaphambili, kodwa yasulwa ukubhaliswa ekuqaleni kuka-2020. Izinkampani ezisele zazingenazo izinhloso zokupha. Umhlinzeki okhuphuka nomgogodla, i-SquareFlow, umangalele u-Spamhaus. I-SquareFlow inikeza izinsizakalo ezifanayo ku-Cogent, HE, GTT, LibertyGlobal nabanye ngokubamba izinsizakalo ze-VPN. Abaphathi ababili be-SquareFlow Group baphendule esicelweni sethu ngoMashi 1, 2020:
Asikwazi ukukhokhela ukunqamula iklayenti ngokunganaki, siphika zonke izinsiza, ngokusekelwe eqinisweni lokuthi u-Spamhaus uzibheka njengezimbi. Ngaphansi kokungathathi hlangothi, asikwazi ukunquma ukuthi ithrafikhi inonya noma cha ngaphandle kokuhlaziya iphakethe elijulile, kodwa, elizofaka engozini ubumfihlo bamakhasimende ethu kanye nabasebenzisi bawo. Siqondiswa umthetho, hhayi umbono wenkampani yangaphandle efuna ukubizela i-inthanethi yonke ukuthi ubani ovunyelwe ukusebenza kunethiwekhi futhi ngubani ongavunyelwe. Njengamanje, asinabo ubufakazi, imiyalelo yenkantolo, noma ezinye izizathu zokukholelwa ukuthi amakhasimende ethu enza imisebenzi eyingozi.
Ngenxa yokuthi asizange sibambisane no-Spamhaus, benza imizamo eminingana yokulimaza isithunzi senkampani yethu, abahlinzeki bethu kanye nozakwethu. Akukho ngaphansi kwezimo lapho thina noma amakhasimende ethu singathweswa icala ngezinsolo.
Methusa, axwayise, ahlukanise ngenkani
Imizamo yabo yokuba nomthelela kuwo wonke amanethiwekhi ingabhekwa ngokufanelekile njengempoqo, okuyisenzo sobugebengu kuwo wonke amazwe e-EU. Kube nezimo ezimbalwa lapho u-Spamhaus evale wonke amanethiwekhi abahlinzeki ohlwini lwabahlinzeki ngenxa yekhasimende elilodwa, okubaphoqa ukuthi bayeke ukunikeza abangafunwa. Sikholelwa ukuthi ubumfihlo bedatha nokungaziwa kungamalungelo abantu ayisisekelo. Ngenxa yalokho, asisoze salandela ngokuphuphutheka izimfuno ezingenangqondo zika-Spamhaus nanoma iyiphi enye inhlangano ezama ukusho imigomo. Ngenxa yezenzo zabo, sesiqalile ukuthatha izinyathelo ngokumelene nemikhuba yabo yebhizinisi.
Siphinde futhi sisekele ozakwethu emacaleni amelene no-Spamhaus, njengoba u-Spamhaus esazama ukusiphoqa ukuthi siyeke ukunikeza amakhasimende athile ngokuxhumana nozakwethu nabahlinzeki bethu, esimemezela njengezigebengu ngokungathobeli izicelo zabo, okusobala ukuthi kuwukusebenzisa kabi amandla. Siqagela ukuthi ukuthuthela kwabo e-Andorra kuhlobene nokuziphatha kwabo kobugebengu okungqubuzane nesistimu yezomthetho yaseBrithani.
Ozithobayo.
Iqembu le-SquareFlow - Ubudlelwano Bomphakathi
Egameni lebhodi labaqondisi: Wim B., Florian B.
Ukuhambisa i-Spamhaus ukuya e-Andorra
Iphrojekthi ye-Spamhaus okwamanje izinze e-Andorra, izwe elincane elitholakala ePyrenees, okuthi, ngokusho kweWikipedia, yaziwa kakhulu ngezindawo zayo zokungcebeleka eqhweni, izitolo ezingakhokhiswa intela kanye nesimo sentela. Kubalulekile ukuqaphela ukuthi i-Andorra ayiyona ingxenye ye-EU; ubudlelwano phakathi kwe-Andorra ne-European Union bulawulwa yizivumelwano kuphela.
Kwakungelula ukuthola noma yiluphi ulwazi mayelana nenhlangano entsha ehlobene ne-Spamhaus, kodwa ekugcineni ngakwazi ukuthola ulwazi engangiludinga ku-EUIPO (European Union Intellectual Property Office). Ukugcwaliswa kwe-EUIPO kuthi inkampani ebizwa nge-Spamhaus IP Holdings S.L.U. okwamanje ungumnikazi wophawu lwentengiso No. 005703401, usuku lokubhalisa uphawu lokuhweba umhla ziyisi-8 kuNhlolanja wezi-2007. Isicelo sokubhalisa sifakwe ngabakwaBoyes Turner LLP.
Imininingwane Yokubhaliswa Kophawu Lokuthengisa lwe-Spamhaus
Oxhumana nabo bafihliwe ngezizathu ezisobala.
Inothi elivela kumhumushiUkuthola noma yini mayelana nohlangothi olusemthethweni lwe-Spamhaus kunzima ngempela. Ngaphezu kwalokho, ulwazi olutholakala ngaphandle alulona iqiniso ngokusobala. Ulwazi olutholakala kuwebhusayithi ye-Spamhaus ngokwayo mayelana nendawo yenkampani luthinta uphawu lokuhweba - igama elithi "Spamhaus", elibhaliswe e-EU.
I-ROKSO njengesikhubekiso
Ngokusobala, inhloso yephrojekthi ye-Spamhaus kwakuwukuthola abasabalalisi bogaxekile. Njengoba sekushiwo, idatha mayelana nogaxekile igcinwa kusizindalwazi se-ROKSO. Kodwa-ke, uma kubhekwa ukuthi le database isesidlangalaleni, uSpamhaus ubeka bonke abasolwa ebhodini lehlazo. Akukhona nje kuphela ukuthi ungathola idatha yomuntu siqu eningi kusizindalwazi, futhi iqukethe imilayezo evela kuzisulu ezishicilelwa ngaphandle kokuhlolwa. Futhi njengoba u-Spamhaus ehlala ngaphandle kwe-EU, ayikho imiphumela yenkampani evela ku-GDPR.
I-ROKSO igcina irekhodi lawo wonke umsebenzi osolisayo, kungaba ugaxekile wangempela noma iphutha elilula. Ngakho, akukho ukungabaza nganoma yikuphi ukucatshangelwa kobumsulwa. Akunakwenzeka futhi ukuxhumana ngokushesha nenkampani. Ayikho inombolo yocingo, i-imeyili noma ifomu lokuxhumana lokusekelwa kwamakhasimende kuwebhusayithi yabo. Olunye ulwazi oluyizicucu lungatholwa ngokufunda ngokucophelela i-FAQ. Ngizamile ukuxhumana nenkampani ngokuqondile: kusukela ekupheleni kukaJanuwari 2020 kuze kube sekushicilelwe i-athikili [inothi: Ephreli 6 wonyaka ofanayo], akukho mpendulo eyatholwa esicelweni esisodwa.
Ukugxekwa kohlu lwabavinjiwe lwe-Spamhaus (SBL) kusukela kusevisi ye-nVPN ye-VPN
Umhlinzeki we-VPN nVpn ugxeka iphrojekthi ngezinye izizathu. I-Spamhaus Black List (SBL) iyisizindalwazi esivuselelwe njalo samakheli e-IP. U-Spamhaus uncoma ngokuqinile ukungamukeli i-imeyili evela emakhelini aqukethwe kusizindalwazi. Inkampani ize ithi le database ingatholakala ngesikhathi sangempela. Kuwebhusayithi ye-Spamhaus, isigaba se-SBL sithi uhlu oluvinjelwe "luvumela abaphathi beseva yemeyili ukuthi bakhombe, bahlabe umkhosi, noma bavimbe ukuxhumeka okungenayo okuvela kumakheli e-IP u-Spamhaus anquma ukuthi ahlotshaniswe nokuthumela, ukusingathwa, noma ukukhiqiza i-imeyili eyinqwaba engaceliwe." Iphinde ithi isizindalwazi se-SBL sigcinwa ithimba elizinikele labaphenyi nososayensi bezobunhloli abavela emazweni ayi-10 abasebenza ubusuku nemini ukuze baqaphe izindaba eziphathelene nogaxekile. Kodwa-ke, ukuthi ukuhlonza, ukuhlola, noma ukususa amarekhodi kusebenza kanjani ngaphakathi akuchazwa.
I-nVpn ihlale inezinkinga ngokungenela kwe-SBL, okubangela ukuthi izinkampani ezisingethe uhlelo zisabise ngokunqamula izinkontileka zazo. Isibonelo, ngoJanuwari 2019, ummeleli ovela kumsingathi wase-Albania watshela inkampani ukuthi amaseva abo e-VPN ahlile ngenxa “ye-SBL engase ibe khona.”
Futhi lokhu akulona icala kuphela. “Yebo, into efana nalena iyenzeka ngezikhathi ezithile. Kungenzeka ukuthi iseva ivaliwe okwesikhashana ngenxa yokufakiwe ku-SBL, noma izinkampani zivele ziyikhansele ngokuphelele inkontileka. Ekuqaleni (sibuza ngokuqondile), bathi ngeke kube nezinkinga nge-SBL, kodwa uma lonke uhla lwabo lwe-IP lufakwe ohlwini lwabakwa-Spamhaus, isimo siyashintsha. Isibonelo, yile ndlela esilahlekelwe ngayo iseva yethu e-Niš, e-Serbia. Lokhu bekusemasontweni ambalwa edlule. Ngenhlanhla, inkampani isinikeze imbuyiselo engaphelele yokuqashwa kweseva yethu, ekhokhelwe izinyanga ezimbalwa kusengaphambili. I-Spamhaus iyingozi ngempela ezinsizeni ze-VPN, kodwa kufanele siphile nayo.
Omele i-nVPN uyaqhubeka:
Sihlinzeka ngesevisi ye-VPN engabhalisiwe futhi singezinye ezimbalwa ezinikeza amakhasimende ikhono lokuvula amachweba ayisishiyagalombili (i-TCP ne-UDP). Kuyinto engenakugwemeka ukuthi abanye abahlaseli bazozama ukusebenzisa kabi lesi sici ngezinhloso ezingekho emthethweni. Nakuba sisho ngokucacile emigomeni yethu yesevisi ukuthi ukusetshenziswa okunjalo kunqatshelwe, lokhu akusho ukuthi wonke amakhasimende athobela imithetho. Ngenxa yalokho, ezinye zeziqalo zethu zigcine ngokuthi EDROP. Kodwa ngokubona kwethu, ukungena kwe-EDROP akukona ukuphela komhlaba, ngisho noma kuvimbela amawebhusayithi ambalwa noma isevisi yokusakaza noma amabili.
Nokho, lokhu kusadala izinkinga. Ake sicabange ukuthi siqashe iseva ndawana thize futhi sakha eyethu i-subnet /24 ukuze sikhangise ngaphansi kwe-ASN yenkampani esisingathayo noma ngaphansi kwethu. U-Spamhaus uthinta umphathi wethu futhi usicela ukuthi sinqamule iklayenti, okungukuthi, thina. Uma umhlinzeki engahambisani nezicelo zabo ngoba esethemba, u-Spamhaus uqala ukwengeza iziqalo ze-hoster ezihlanzekile ku-SBL, okwenza wonke amanye amakhasimende ayo angakwazi ukuthumela imeyili. Khona-ke inkampani ayinayo enye indlela futhi iyasivala ukuze bangalahlekelwa ukulahlekelwa okukhulu kwezimali.
Isibonelo sencwadi yokwenqaba evela kumsingathi:
Sawubona
Ngeshwa, ngeke sisakwazi ukukubamba kunethiwekhi yethu njengoba u-Spamhaus evale wonke amakheli ethu e-IP ngenxa yokusingathwa kwakho nathi.
Iseva yakho izovalwa ngosuku lokugcina lokuqasha ngaphandle kokuba nokwenzeka kokuvuselelwa.
Sicela ulondoloze ikhophi yasenqolobaneni ngokushesha futhi uthuthele komunye umhlinzeki.Ozithobayo,
Vikas S.
(Umqondisi/Umsunguli)
I-Skype: v **** vp *
Ukunqanyulwa kwezinsizakalo kanye nokwenqaba ukubambisana okuqhubekayo
I-nVpn ithi ilahlekelwe amaseva amaningi ngenxa yabasingathi abangabambisene eminyakeni yamuva. Ekugcineni, kwaba nzima ukuthola inkampani ezimisele ukubamukela. I-nVpn yethule i-Tarnkappe.info umyalo wokumisa ukubambisana futhi yenqabe ukuhlinzekwa okwengeziwe kwezinsizakalo zangomhla ziyi-11 kuJulayi 2019. Incwadi evela kumhlinzeki wokusingathwa waseSwitzerland ithi iphrojekthi ye-Spamhaus izosebenzisa "umthetho wobugebengu" - okungukuthi, ukuphoqa umhlinzeki ukuba enqabe ukunikeza enye inkampani ukusingathwa ngaphansi kobuhlungu bezinqubo zomthetho.
Omele i-nVpn ubeke amazwana:
Kwesinye isikhathi u-Spamhaus akanqikazi ukuxhumana nezinkampani futhi afune ukuthi zingasahambisani neziqalo zethu. Kodwa akuwona wonke umuntu ovumelana nalokhu. Enye yalezi zinkampani yanquma ukumangalela iSpamhaus Ltd e-United Kingdom, lapho ikomkhulu lalo msebenzi lalikhona ngaphambili. Ngaleso sikhathi u-Spamhaus akakwazanga ukusebenzisa i-Ltd egameni.
Ngenxa yokuqulwa kwaleli cala, u-Spamhaus kwadingeka athuthe indlunkulu yakhe isuka e-UK iye e-Andorra.
Kusukela lapho, i-nVpn isathola izaziso ezivela ku-SBL, kodwa u-Spamhaus ekugcineni uyekile ukusongela abahlinzeki babo ababamba. Abakwa-Spamhaus baphinde bayeka ukuphendula izicelo zesevisi ye-VPN zokususa okufakiwe ku-SBL, okusho ukuthi imibhalo eminingi yakudala ayisasuswa futhi ihlala kusizindalwazi, ngisho noma ingasabalulekile.
Umhlinzeki we-VPN ukhuluma ukuthi i-Spamhaus isize ukunciphisa ugaxekile womhlaba esikhathini esidlule, obelusizo. Kodwa ngokuhamba kwesikhathi, iphrojekthi yaqala ukudonsa ingubo phezu kwayo, ishicilela idatha yomuntu siqu yalabo abasohlwini futhi ikhohlisa izinkampani zokubamba.
Azikho izimpendulo zemibuzo ebucayi
Kusenemibuzo eminingi mayelana nephrojekthi ye-Spamhaus okungekho ofuna ukuyiphendula. Isicelo engisithumele kumcwaningi ogaxekile waseMelika kanye nentatheli uBrian Krebs emasontweni amathathu edlule asikaze sithole impendulo. Mhlawumbe imibuzo ibibukhali kakhulu, kodwa lokhu akucaci ngokuphelele. Izicelo zithunyelwe kwezinye izinkampani, kodwa cishe akekho owazi indaba ephelele yephrojekthi ye-Spamhaus.
Mayelana nombhali wesihloko sokuqala
Lars "Ghandy" Sobiraj
U-Lars Sobiraj waqala umsebenzi wakhe ngo-2000 njengombhali womagazini abahlukahlukene bekhompyutha. Ungumsunguli weTarnkappe.info. Kusukela ngo-2014, uGandhi, njengoba ezibiza kanjalo esiteji, ubekhuluma nabafundi basemanyuvesi ahlukene nezinye izikhungo zemfundo mayelana nendlela i-inthanethi esebenza ngayo.
Kusuka kumhumushi
Imisebenzi ye-Spamhaus isivele ikhona yahlanganiswa ku-Habré, futhi ngendlela engeyinhle kuphela. E-Russia, i-Spamhaus iphazamise (futhi iphazamisa) nomsebenzi wezinkampani ezizimele kanye nezinkampani ezinkulu zokubamba. Ngo-2010, lonke i-Latvia yafakwa ohlwini lwabamnyama: ngakho-ke, ekuphenduleni izikhalazo ezivela komunye wabahlinzeki abakhulu kakhulu ezweni, u-Spamhaus waphendula ngokuthi iLatvia ingenye yamazwe amancane kakhulu emhlabeni, njengokungathi i-hinting. Ngesizathu esithile, okuthunyelwe kokugcina okuhlobene ne-Spamhouse kubhalwe ngo-2012-2013, nakuba inkampani isekhona nanamuhla, ngicabanga ukuthi lokhu kuchithwa okungalungile kudinga ukuphazanyiswa.
Source: www.habr.com