Sounds like fasthost is checking the DBL on the EHLO/HELO value and forgetting to first reject/ignore HELO's with IP Literals...

Of course, you can expect that to be a common method of checking DBL's, so surprised that it is treated that way, I can expect that a lot of ppl might not consider that unintended result.

On 18-01-24 06:30 AM, Al Iverson wrote:
Spamhaus gives a special response code to idio-- er, people who query
DBL as an IP DNSBL.

$ host 237.177.65.188.dbl.spamhaus.org
237.177.65.188.dbl.spamhaus.org has address 127.0.1.255

"To prevent a build-up of wasted IP query traffic to the DBL zone,
which would grow exponentially to problematic levels if left
unchecked, Spamhaus DNS returns the code 127.0.1.255 to IP queries to
the DBL zone, along with a TXT record referring to this FAQ page."

https://www.spamhaus.org/faq/section/Spamhaus%20DBL#291

Smells like a Fasthosts misconfiguration from here.

Cheers,
Al Iverson

On Wed, Jan 24, 2018 at 9:14 AM, Paul Smith <p...@pscs.co.uk> wrote:
On 24/01/2018 13:43, Olaf Petry - Hornetsecurity wrote:

dbl.spamhaus.org is a domain blacklist,

So I guess the email contains a link which is listed there and the reject
code is an unfortunate phrase.


You'd hope so - but, no. The email contains no links and the sender's domain
is not in the DBL (at the moment). I suppose the sender's domain could have
been in the DBL at the time the message was sent, but there's no way to
tell.





_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop






--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to