Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Matthias Buelow
Erik Norgaard wrote:
How on earth did it end up there? are someone mad at us? mx1 is not 
listed, but it appears that most list mail comes from mx2...
JFYI, from Matthew Sullivan, SORBS operator:
> Listed in Error - removed.
> Regards,
> Mat
mkb.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Warren Block
On Thu, 3 Feb 2005, Bill Campbell wrote:
It doesn't surprise me that the IP made spam DNSBLs because a fair amount
of spam does get through to the list.
I would characterize that as "a very small amount", but yes, a few spam 
messages do get through.  Compared to most lists, and especially 
considering that many of the FreeBSD lists can be posted to without 
subscribing, I'd say they are extremely clean.

It's not obvious that messages come from the list (one of advantages 
of subject tagging with list prefixes) so it's easy for people to 
report that spam to places like spamcop without realizing that it's 
list traffic.
Don't think SORBS takes nominations, but who knows.  The reason I had 
both the FreeBSD mailer IPs in my access list was because at some point 
in the past I had manually blocked the ranges those addresses were in 
for relaying Korean spam.  Not the two FreeBSD addresses, just the 
ranges.

I think the list manager for this list is Mailman.  It's easy to implement
spamassassin checking in Mailman which would probably catch a large
percentage of the spam that now gets through to the list.
The web page says the list owner is freebsd-questions-owner -at- 
freebsd.org.  Or postmaster would probably be appropriate also.

-Warren Block * Rapid City, South Dakota USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Erik Norgaard
Bill Campbell wrote:
It doesn't surprise me that the IP made spam DNSBLs because a fair amount
of spam does get through to the list.  It's not obvious that messages come
from the list (one of advantages of subject tagging with list prefixes) so
it's easy for people to report that spam to places like spamcop without
realizing that it's list traffic.
? I very rarely see spam on this list, unless I count posts that just 
doesn't interest I, but it is not fair to clasify SEPs as SPAM, as long 
as the SEPs relate to the list.

Cheers, Erik
--
Ph: +34.666334818   web: http://www.locolomo.org
S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Bill Campbell
On Thu, Feb 03, 2005, Marc G. Fournier wrote:
>On Thu, 3 Feb 2005, Warren Block wrote:
>
>>On Wed, 2 Feb 2005, Erik Norgaard wrote:
>>
>>>Just to clarify myself, mx2.freebsd.org is listed in dnsbl.sorbs.net and 
>>>spam.dnsbl.sorbs.net but NOT in smtp.dnsbl.sorbs.net
>>>
>>>I just checked sorbs spamdb faq, they require a fine of $50 per spam mail 
>>>donated to charity!? - is FreeBSD ok as charity? - to delist a server, 
>>>with the exception if it happens due to blocking a whole netblock.
>>
>>If you're using sendmail:
>>cd /etc/mail
>>edit access and add:
>>
>># FreeBSD mailers
>>216.136.204.119 OK
>>216.136.204.125 OK
>>
>>Save and 'make maps'.
>>
>>>Time to block sorbs I guess...
>>
>>Unless SORBS is trying to send you email, what would that accomplish?
>>
>>If you use SORBS and don't like their policies, just stop using them. Or 
>>explicitly allow mail from the IP addresses you want, as above.
>
>What I'm more curiuos about is *how* the FreeBSD mail servers go onto the 
>list in the first place ... did someone submit them because they couldn't 
>figure out how to unsubscribe, and got tired of receiving freebsd-* mail?

It doesn't surprise me that the IP made spam DNSBLs because a fair amount
of spam does get through to the list.  It's not obvious that messages come
from the list (one of advantages of subject tagging with list prefixes) so
it's easy for people to report that spam to places like spamcop without
realizing that it's list traffic.

I think the list manager for this list is Mailman.  It's easy to implement
spamassassin checking in Mailman which would probably catch a large
percentage of the spam that now gets through to the list.  We run lists
here with postfix and amavisd-new which traps worms that attack the
Microsoft virus, Windows, and flags messages that spamassassin identifies
as spam with headers that are easy to pick up with Mailman to forward to
the list owner for approval.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Many companies that have made themselves dependent on [the equipment of a
certain major manufacturer] (and in doing so have sold their soul to the
devil) will collapse under the sheer weight of the unmastered complexity of
their data processing systems.
-- Edsger W. Dijkstra, SIGPLAN Notices, Volume 17, Number 5
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread RacerX
On Thu, 3 Feb 2005, Erik Norgaard wrote:
Marc G. Fournier wrote:
What I'm more curiuos about is *how* the FreeBSD mail servers go onto the 
list in the first place ... did someone submit them because they couldn't 
figure out how to unsubscribe, and got tired of receiving freebsd-* mail?
Excactly! Maybe someone got tired of the endless discussion on performance of 
5.x or lack of userbase support that swept the list a few weeks? although 
sorbs claims that individual cannot submit spamservers.

Cheers, Erik
--
Blah - we can always blame it on the Linux-Munkies
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread RacerX
On Thu, 3 Feb 2005, Marc G. Fournier wrote:
On Thu, 3 Feb 2005, Warren Block wrote:
On Wed, 2 Feb 2005, Erik Norgaard wrote:
Just to clarify myself, mx2.freebsd.org is listed in dnsbl.sorbs.net and 
spam.dnsbl.sorbs.net but NOT in smtp.dnsbl.sorbs.net

I just checked sorbs spamdb faq, they require a fine of $50 per spam mail 
donated to charity!? - is FreeBSD ok as charity? - to delist a server, 
with the exception if it happens due to blocking a whole netblock.
If you're using sendmail:
cd /etc/mail
edit access and add:
# FreeBSD mailers
216.136.204.119 OK
216.136.204.125 OK
Save and 'make maps'.
Time to block sorbs I guess...
Unless SORBS is trying to send you email, what would that accomplish?
If you use SORBS and don't like their policies, just stop using them. Or 
explicitly allow mail from the IP addresses you want, as above.
What I'm more curiuos about is *how* the FreeBSD mail servers go onto the 
list in the first place ... did someone submit them because they couldn't 
figure out how to unsubscribe, and got tired of receiving freebsd-* mail?

Actually I think I can answer that: users (many of them) most likly 
subscribe to the lists using a "work" email address. That being said, the 
admins see this and prolly think it's spam etc. and submit it.

Many users use company email for the lists (you can tell by the auto 
replies when they go off on vaca or what have you).

With that being said, these same users prolly are violating some sort of 
AUP that they had to sign when hired. I have an issue with these types of 
folks.

Granted, there are some that use company resources for this, but they also 
support *BSD in the work environment - that would fall under work related.

Just my .02 worth.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Erik Norgaard
Marc G. Fournier wrote:
What I'm more curiuos about is *how* the FreeBSD mail servers go onto 
the list in the first place ... did someone submit them because they 
couldn't figure out how to unsubscribe, and got tired of receiving 
freebsd-* mail?
Excactly! Maybe someone got tired of the endless discussion on 
performance of 5.x or lack of userbase support that swept the list a few 
weeks? although sorbs claims that individual cannot submit spamservers.

Cheers, Erik
--
Ph: +34.666334818   web: http://www.locolomo.org
S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Marc G. Fournier
On Thu, 3 Feb 2005, Warren Block wrote:
On Wed, 2 Feb 2005, Erik Norgaard wrote:
Just to clarify myself, mx2.freebsd.org is listed in dnsbl.sorbs.net and 
spam.dnsbl.sorbs.net but NOT in smtp.dnsbl.sorbs.net

I just checked sorbs spamdb faq, they require a fine of $50 per spam mail 
donated to charity!? - is FreeBSD ok as charity? - to delist a server, with 
the exception if it happens due to blocking a whole netblock.
If you're using sendmail:
cd /etc/mail
edit access and add:
# FreeBSD mailers
216.136.204.119 OK
216.136.204.125 OK
Save and 'make maps'.
Time to block sorbs I guess...
Unless SORBS is trying to send you email, what would that accomplish?
If you use SORBS and don't like their policies, just stop using them. Or 
explicitly allow mail from the IP addresses you want, as above.
What I'm more curiuos about is *how* the FreeBSD mail servers go onto the 
list in the first place ... did someone submit them because they couldn't 
figure out how to unsubscribe, and got tired of receiving freebsd-* mail?


Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
Email: [EMAIL PROTECTED]   Yahoo!: yscrappy  ICQ: 7615664
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-03 Thread Warren Block
On Wed, 2 Feb 2005, Erik Norgaard wrote:
Just to clarify myself, mx2.freebsd.org is listed in dnsbl.sorbs.net and 
spam.dnsbl.sorbs.net but NOT in smtp.dnsbl.sorbs.net

I just checked sorbs spamdb faq, they require a fine of $50 per spam mail 
donated to charity!? - is FreeBSD ok as charity? - to delist a server, with 
the exception if it happens due to blocking a whole netblock.
If you're using sendmail:
cd /etc/mail
edit access and add:
# FreeBSD mailers
216.136.204.119 OK
216.136.204.125 OK
Save and 'make maps'.
Time to block sorbs I guess...
Unless SORBS is trying to send you email, what would that accomplish?
If you use SORBS and don't like their policies, just stop using them. 
Or explicitly allow mail from the IP addresses you want, as above.

-Warren Block * Rapid City, South Dakota USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-02 Thread Erik Norgaard
Erik Norgaard wrote:
I have been thrown off the list because of too many bounces, turns out 
that mx2.freebsd.org has been listed at dnslb.sorbs.net,

$ host 119.204.136.216.dnsbl.sorbs.net
119.204.136.216.dnsbl.sorbs.net has address 127.0.0.6
Just to clarify myself, mx2.freebsd.org is listed in dnsbl.sorbs.net and 
spam.dnsbl.sorbs.net but NOT in smtp.dnsbl.sorbs.net

I just checked sorbs spamdb faq, they require a fine of $50 per spam 
mail donated to charity!? - is FreeBSD ok as charity? - to delist a 
server, with the exception if it happens due to blocking a whole netblock.

Time to block sorbs I guess...
Cheers, Erik
--
Ph: +34.666334818   web: http://www.locolomo.org
S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mx2.freebsd.org in dnsbl.sorbs.net

2005-02-02 Thread Miguel Mendez
On Wed, 02 Feb 2005 16:37:40 +0100
Erik Norgaard <[EMAIL PROTECTED]> wrote:

Hi Erik,
 
> I have been thrown off the list because of too many bounces, turns out
> 
> that mx2.freebsd.org has been listed at dnslb.sorbs.net,
> 
> $ host 119.204.136.216.dnsbl.sorbs.net
> 119.204.136.216.dnsbl.sorbs.net has address 127.0.0.6
> 
> How on earth did it end up there? are someone mad at us? mx1 is not 
> listed, but it appears that most list mail comes from mx2...
> 
> I have had other problems trying to filter spam, yet recieve
> legitimate  mail on the lists - I'm using postfix. How do you set up
> your filters?

Have you contacted [EMAIL PROTECTED] He should get in contact with
SORBS and get the host delisted. My theory about how mx2 ended up there:
Maybe somebody has an automated spam submitting system and SORBS parsed
the addresses of one of the few spam messages that get through the list
or either someone intentionally submitted a forged e-mail there.

Either way, SORBS is a total joke and nobody should ever use them. They
unilaterally blacklisted my /16 and there's zero change I'll ever get
delisted until I pay the $50 "extortion fee". Apparently the facts that
I've had the same IP for 5 years and that I publish SPF records don't
matter.

I laugh at the "Fighting spam by finding and listing Exploitable
Servers." title in their web page. Google for 'sorbs sucks', nice reads
:-)

If you want to filter spam you can use spamassassin (disablig the sorbs
and spews tests) and greylisting which works very well. SPF checks also
catch a few forged e-mails on my server (probably virus-generated but
spam nonetheless.)

Cheers,
-- 
Miguel Mendez <[EMAIL PROTECTED]>
http://www.energyhq.es.eu.org
PGP Key: 0xDC8514F1



pgpOwVbhVNFPq.pgp
Description: PGP signature