Re: [mailop] Cloudmark blocklist

2024-06-28 Thread Scott Mutter via mailop
On Fri, Jun 28, 2024 at 9:24 AM James Hoddinott via mailop <
mailop@mailop.org> wrote:

> Your main issue is that Transip sure do like to let spammers make use of
> many IPs within the /24 that you're in, we'll just need to flag yours as
> separate to prevent this from reoccurring.
>
>
Wouldn't you expect to see 37.97.176.137 listed in several public RBLs and
have a low sender score if this were the case?

If Cloudmark (or any other anti-spam system) is just blocking the whole /17
or ASN - wouldn't it be just a simple fix to look specifically for
37.97.176.137
and see how much spam 37.97.176.137 has sent?  Or when the last time
37.97.176.137
sent spam or attempted to send out any mail?  And exclude 37.97.176.137
from this block (I don't like the term whitelist here, but if you want to
use whitelist you can use it here) so that mail from 37.97.176.137 can go
through when this specific issue is raised?

This is what kind of creates mistrust with all of these too-big-to-fail
email and anti-spam providers.  They block an IP but don't provide any
information for remediation and take days or weeks to get an issue cleared
up.  There's seemingly little evidence to show that blocking the IP is
validated.

Where would one go to learn of this situation prior to sending an email to
a random email service provider that utilizes Cloudmark (or insert whatever
anti-spam system) so that the situation could be handled proactively and
timely?

There needs to be something publicly available that would point to IP
addresses - such as 37.97.176.137 - being red flagged or to suggest that
there may be issues sending from these IPs.  But instead the system teeters
on providers being able to block IPs simply because they can.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Cloudmark blocklist

2024-06-28 Thread Kasper Peeters via mailop
> Your main issue is that Transip sure do like to let spammers make use of
> many IPs within the /24 that you're in, we'll just need to flag yours as
> separate to prevent this from reoccurring.

While I understand some of the logic behind blocking entire /24s, this kind of 
block makes it very difficult for honest mailops of small systems to run their 
servers. It is difficult to know which hosting providers have a good reputation 
in this respect, so it's more or less a shot in the dark when picking one 
initially. And once you have a mail server up and running for some years and 
realise you have this problem, it is also not easy to switch to a different one 
for fear of losing whatever good IP reputation has been built up (given that 
nobody will tell you whether individual IP reputation and /24 reputation are 
treated as independent things). It's "guilty until proven innocent".

But in any case: thanks for helping, much appreciated.

Kasper


pgp9twXoeXP1Q.pgp
Description: OpenPGP digital signature
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Cloudmark blocklist

2024-06-28 Thread James Hoddinott via mailop
Your main issue is that Transip sure do like to let spammers make use of
many IPs within the /24 that you're in, we'll just need to flag yours as
separate to prevent this from reoccurring.

On Fri, 28 Jun 2024 at 10:19, Kasper Peeters via mailop 
wrote:

> Is there anyone from Cloudmark on the list who can help getting
> 37.97.176.137 off the blocklist? This server does not send
> mass/unsollicited email, has correct SPF/DKIM/DMARC, is not on any other
> blocklist (as far s I can see) and there is no evidence of abuse in the
> logs. I have filled out the form several days ago and responded to the
> email challenge but no noticable effect so far.
>
> Thanks,
> Kasper
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>


-- 
James Hoddinott
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Cloudmark blocklist

2024-06-28 Thread Scott Undercofler via mailop
Replied offlist


Sent from my iPhone

> On Jun 28, 2024, at 4:22 AM, Kasper Peeters via mailop  
> wrote:
> 
> Is there anyone from Cloudmark on the list who can help getting 
> 37.97.176.137 off the blocklist? This server does not send mass/unsollicited 
> email, has correct SPF/DKIM/DMARC, is not on any other blocklist (as far s I 
> can see) and there is no evidence of abuse in the logs. I have filled out the 
> form several days ago and responded to the email challenge but no noticable 
> effect so far.
> 
> Thanks,
> Kasper
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
> 

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] Cloudmark blocklist

2024-06-28 Thread Kasper Peeters via mailop
Is there anyone from Cloudmark on the list who can help getting 37.97.176.137 
off the blocklist? This server does not send mass/unsollicited email, has 
correct SPF/DKIM/DMARC, is not on any other blocklist (as far s I can see) and 
there is no evidence of abuse in the logs. I have filled out the form several 
days ago and responded to the email challenge but no noticable effect so far.

Thanks,
Kasper


pgp9fcUWdmNpR.pgp
Description: OpenPGP digital signature
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Cloudmark Blocklist

2024-06-20 Thread Scott Undercofler via mailop
Replied off list. 

> On Jun 20, 2024, at 8:38 AM, Scott Mutter via mailop  
> wrote:
> 
> Anyone from Cloudmark able to assist with why the IP address:
> 
> 67.222.148.107
> 
> is listed in their blacklist?
> 
> I filled out the form
> 
> https://csi.cloudmark.com/en/reset
> 
> two days ago.  I got the Confirm CSI IP Address Statistics Reset Request 
> email and responded to it.  But the IP still appears to be listed.  I do not 
> know why.
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] Cloudmark Blocklist

2024-06-20 Thread Scott Mutter via mailop
Anyone from Cloudmark able to assist with why the IP address:

67.222.148.107

is listed in their blacklist?

I filled out the form

https://csi.cloudmark.com/en/reset

two days ago.  I got the Confirm CSI IP Address Statistics Reset Request
email and responded to it.  But the IP still appears to be listed.  I do
not know why.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop