Description:

The RABL (pronounced "rabble") server is a statistical, machine-automated
and up-to-the-second blackhole list server designed to monitor global network
activity and make decisions based on network spread and infection rate - that
is, abuse from an address which has been provided via automated feed from a
number of participating networks. This is in far contrast to how most other
blacklists function, where fallable humans (many with political agendas) must
process thousands of hand-written reports and make decisions - many times after
the fact. The RABL is fully reactive to new threats and can block addresses
within seconds of widespread infection because it is in constant communication
with the participating networks (or "sources") - good to know in this world of
drone PCs and stolen accounts. The RABL server blacklists addresses until they
have cleared a minimum duration (an hour by default) without any additional
reporting, making the appeals process as simple as "fix your junk". The RABL is
designed to function via automated machine-learning spam filters, such as
Bayesian filters. Each participating network is granted write authentication in
the blackhole list, to prevent abuse. A client tool is also provided. Because
no humans are involved in this process, the RABL acts as a mere activity
monitor and can run on its own. There's also nobody to sue (since you can't sue
computers for talking to each other) which makes things far less messy for
participants.