Re: [mailop] Anyone from Prodigy

2024-05-29 Thread Bill Cole via mailop 

On 2024-05-29 at 02:13:50 UTC-0400 (Wed, 29 May 2024 06:13:50 +)
Mark Dale via mailop 
is rumored to have said:


Is there anyone from Prodigy on the list?

We're seeing mail blocked that is addressed to @sbcglobal.net, 
@att.net


And no response from postmaster[AT]prodigy nor 
abuse_rbl[AT]abuse-att.net


In my most recent experiences with them, I have noticed that the latter 
address gets action, but it will likely take 2 business days.



2024-05-29T06:04:23.831730+00:00 hio postfix/smtp[2868369]: 
069BF41D39: to=, 
relay=ff-ip4-mx-vip1.prodigy.net[144.160.159.21]:25, delay=0.8, 
delays=0/0.01/0.7/0.08, dsn=5.3.0, status=bounced (host 
ff-ip4-mx-vip1.prodigy.net[144.160.159.21] said: 553 5.3.0 flpd573 
DNSBL:RBL 521< REDACTED_IP >_is_blocked.For assistance forward this 
error to abuse_...@abuse-att.net (in reply to MAIL FROM command))


Thanks,
Mark


--
-- - --
   MailmanLists
   Mailman hosting in Australia, Europe, UK, USA
   www.mailmanlists.net
   Tel: +61 .2 7255 9924
-- - --
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com 
addresses)

Not Currently Available For Hire
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Telstra / Bigpond

2024-05-29 Thread Dave Smith via mailop 
Hi,

Is Brad or anyone from Telstra/Bigpond around to help with a deferral
question?

Many thanks,
Dave Smith
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Help with AT&T block ... ?

2024-05-29 Thread Bryan Holloway via mailop 

Could someone from AT&T contact me?

I have an IP that's being blocked. I've checked all of the DNS BLs, and 
we're 100% clean (as far as I can tell.)


E-mails to abuse_...@abuse-att.net have gone unanswered.

Thanks!
- bryan
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] [E] Help with AT&T block ... ?

2024-05-29 Thread Lili Crowley via mailop 
Hey Bryan-

Please contact me off list.

Thanks!


*Lili Crowley*

she/her

Postmaster








On Wed, May 29, 2024 at 12:35 PM Bryan Holloway via mailop <
mailop@mailop.org> wrote:

> Could someone from AT&T contact me?
>
> I have an IP that's being blocked. I've checked all of the DNS BLs, and
> we're 100% clean (as far as I can tell.)
>
> E-mails to abuse_...@abuse-att.net have gone unanswered.
>
> Thanks!
> - bryan
> ___
> mailop mailing list
> mailop@mailop.org
>
> https://urldefense.com/v3/__https://list.mailop.org/listinfo/mailop__;!!Op6eflyXZCqGR5I!CboKeyEo2CGuUJn2ox94_sMCxEaO7Q480UlTnK1C1mtbSZODva8DolOPNVWGGOcNlqzK7xxwg3kZqzAt8rU$
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Scanner frequency ?

2024-05-29 Thread J Doe via mailop 

Hi list,

Has anyone noticed a recent increase in the frequency of scans of their
mail servers by Censys ?

I am seeing the following in my logs more often:

May 29 01:49:13 server smtpd[50661]: 78d6ab67951b801a smtp
connected address=199.45.154.4
host=scanner-401.hk2.censys-scanner.com

Thanks,

- J
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Scanner frequency ?

2024-05-29 Thread Mark Alley via mailop 

The website is here below; I get this in my web logs occasionally.

https://about.censys[.]io/

User Agent: Mozilla/5.0 (compatible; CensysInspect/1.1; 
+https://about.censys[.]io/)


- Mark Alley


On 5/29/2024 3:29 PM, J Doe via mailop wrote:

Hi list,

Has anyone noticed a recent increase in the frequency of scans of their
mail servers by Censys ?

I am seeing the following in my logs more often:

    May 29 01:49:13 server smtpd[50661]: 78d6ab67951b801a smtp
    connected address=199.45.154.4
    host=scanner-401.hk2.censys-scanner.com

Thanks,

- J
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Scanner frequency ?

2024-05-29 Thread J Doe via mailop 

On 2024-05-29 17:16, Mark Alley via mailop wrote:


The website is here below; I get this in my web logs occasionally.

https://about.censys[.]io/

User Agent: Mozilla/5.0 (compatible; CensysInspect/1.1;
+https://about.censys[.]io/)

- Mark Alley


Hi Mark,

Thank you for your reply.  I am familiar with what Censys is, but what I
found unusual is that the frequency with which they scan has noticeably
increased over the last week or so ... at least from the perspective of
the mail server I manage.

I wasn't sure if others in the Mailop community were also seeing this or
whether I was just "lucky"!

- J

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Scanner frequency ?

2024-05-29 Thread Frost The Fox via mailop 
I see what you are describing on a primary MX of mine, same IP address
connecting multiple times roughly every hour.

May 29 22:31:44 irys postfix/submission/smtpd[444857]: warning: hostname
scanner-401.hk2.censys-scanner.com does not resolve to address 199.45.154.4:
Name or service not known
May 29 22:31:44 irys postfix/submission/smtpd[444857]: connect from
unknown[199.45.154.4]
May 29 22:31:44 irys postfix/submission/smtpd[444857]: lost connection
after UNKNOWN from unknown[199.45.154.4]
May 29 22:31:44 irys postfix/submission/smtpd[444857]: disconnect from
unknown[199.45.154.4] unknown=0/1 commands=0/1

That seems more often than I remember as well but I don't particularly keep
an eye on their connections.

-Frost

On Wed, May 29, 2024 at 7:08 PM J Doe via mailop  wrote:

> On 2024-05-29 17:16, Mark Alley via mailop wrote:
>
> > The website is here below; I get this in my web logs occasionally.
> >
> > https://about.censys[.]io/
> >
> > User Agent: Mozilla/5.0 (compatible; CensysInspect/1.1;
> > +https://about.censys[.]io/)
> >
> > - Mark Alley
>
> Hi Mark,
>
> Thank you for your reply.  I am familiar with what Censys is, but what I
> found unusual is that the frequency with which they scan has noticeably
> increased over the last week or so ... at least from the perspective of
> the mail server I manage.
>
> I wasn't sure if others in the Mailop community were also seeing this or
> whether I was just "lucky"!
>
> - J
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Telstra / Bigpond

2024-05-29 Thread Bradley King via mailop 
Hi Dave,

I'll reach out off-list.

Cheers,

Brad




30 May 2024 at 01:43, "Dave Smith via mailop"  wrote:



> 
> Hi,
> 
> Is Brad or anyone from Telstra/Bigpond around to help with a deferral 
> question?
> 
> Many thanks,
> Dave Smith
>___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] UPDATED Re: Yahoo no longer accepting email forwards?

2024-05-29 Thread Mark E. Jeftovic via mailop 

Thanks to all who reached out or provided guidance.

Been meaning to report back - we did go ahead and open a ticket via the 
URL supplied here


https://senders.yahooinc.com/contact/

A few days later we received the response:


Hi Ted, (our postmaster)

Great news! The engineers let me know that everything should be 
working now.


Let me know if you have any other questions or concerns.

Kind regards,

Ernie
Yahoo Customer Care


That was all - we were never directed to address any issues on our side. 
Just that they looked into it and it was fixed.


Which has been the case ever since.

(To re-cap, our some of our email /forwarders/ were garnering PH01 
errors from Yahoo - which apparently means suspected phish or malware 
link, even on messages with no links)


- mark

On 2024-05-21 4:04 PM, Mark E. Jeftovic via mailop wrote:


It's beginning to sound localized to us, so thanks for all the replies.

(I'm checking if our ops team have submitted a ticket via the URL 
Faisal mentioned, if not we will)


We have three separate paths these messages could take:

1) standard email forwarding + SRS enabled - this is affected and I 
need to check on DKIM here


2) catch-all email forwarding - separate path, affected and catch-all 
being what it is, understandable - which is why we have it separated out


3) hosted email here, with additional forwards - the outbound for 
hosted has DKIM, the additional forwards have SPF and SRS and are 
unaffected


(We are in the process of planning out our ARC deployment - my guys 
are telling me there are some issues, so open to recommendations on 
implementing it on debian running postfix)


- mark

On 2024-05-21 3:45 PM, John Levine wrote:

It appears that Mark E. Jeftovic via mailop  said:

The only difference between messages that get through vs ones that are
rejected (same message) is whether we send to the Yahoo email box
directly, or else via an email forward (which has SRS enabled, and
optionally SPF and even minimal DMARC)

Yahoo pays very little attention to SPF.  They're more interested in DKIM
signatures and the reputation of the sending IPs.

Tell us about the forwarder you're using.  Are you sure it doesn't break
the DKIM signature?  What else does it forward?

R's,
John


--
Mark E. Jeftovic 
Co-founder & CEO easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225

/"Never expect a thing you do not want,
and never desire a thing you do not expect."
-- Bob Proctor /

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

--
Mark E. Jeftovic 
Co-founder & CEO easyDNS Technologies Inc.
+1-(416)-535-8672 ext 225

/"Never expect a thing you do not want,
and never desire a thing you do not expect."
-- Bob Proctor /___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop