Thank you Chris. Maybe too soon to block all sg3.yahoo.com but in logs I
only see spam and I wasn't sure, is this a dynamic range for DSL
connectivity? Or does Yahoo originate legitimate mail thru here, I hoped
someone knew more about Yahoo to give an insight.
On 2019-05-23 17:46, Chris Woods via mailop wrote:
_spf.mail.yahoo.com [3] SPF record validates any IP with a PTR within
yahoo.com [4] or yahoo.net [5]. Unless someone's spoofing rDNS it's
from one of their MTAs.
https://secure.fraudmarc.com/tool/spf/_spf.mail.yahoo.com
Googling around, other example records:
tm13.bullet.mail.sg3.yahoo.com [6] (old result, no longer active)
sonic305-46.consmr.mail.sg3.yahoo.com [7]
(https://ipinfo.io/106.10.241.109)
sonic308.consmr.mail.sg3.yahoo.com [8]
(https://ipinfo.io/106.10.241.4)w2.src.vip.sg3.yahoo.com [9]
(https://ipinfo.io/106.10.248.150)
SG3 may be a Yahoo means of denoting it's a Singapore AS with 3
routes/prefixes?
(https://dnslytics.com/ip/106.10.128.0-106.10.255.255)
etc. It's an AS registered at APNIC, managed by Yahoo Inc. employees
and whose parent AS is Oath Holdings (ARIN AS10310).
https://ipinfo.io/AS56173 [10]
https://radar.qrator.net/as56173/whois
http://ipv4info.com/org/s8dcb53/IRT-YAHOO-AP.html
https://wq.apnic.net/static/search.html
Your system, your drop rules :-)
On Thu, 23 May 2019 at 18:10, MRob via mailop <mailop@mailop.org>
wrote:
In logs I see a large amount spam from servers like
sonic303-21.consmr.mail.sg3.yahoo.com [1]
..this looks like it could be a home DSL location but before I ban
all
of sg3.yahoo.com [2] I would like to ask, where does valid Yahoo
mail come
from?
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
Links:
------
[1] http://sonic303-21.consmr.mail.sg3.yahoo.com
[2] http://sg3.yahoo.com
[3] http://spf.mail.yahoo.com
[4] http://yahoo.com
[5] http://yahoo.net
[6] http://tm13.bullet.mail.sg3.yahoo.com
[7] http://sonic305-46.consmr.mail.sg3.yahoo.com
[8] http://sonic308.consmr.mail.sg3.yahoo.com
[9] http://w2.src.vip.sg3.yahoo.com
[10] https://ipinfo.io/AS56173
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
