ANNOUNCEMENT: Online Audio/Video Lectures on Networking
Folks, I have collected the videos/audios of my undergraduate/graduate networking classes and put it online: http://www.ecse.rpi.edu/Homepages/shivkuma/teaching/video_index.html I hope it will be a useful public resource for the community. Comments/errata welcome. best -Shiv === Shivkumar Kalyanaraman Associate Professor, Dept of ECSE, Rensselaer Polytechnic Institute (RPI) 110, 8th Street, Room JEC 6003, Troy NY 12180-3590 Ph: 518 276 8979 Fax: 518 276 4403 WWW: http://www.ecse.rpi.edu/Homepages/shivkuma
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
On 27 May 2003, John R. Levine wrote: > > Despite attempts to contact DNSRBL / Namesystems I'm not receiving > > any response at all - has anyone on the list any useful contacts? > > (www.dnsrbl.com) - please reply off list. > > I know a lot of DNSBLs, and I've never heard of this one before, nor > do I know anyone who uses it. I've heard of it...can't remember why. Perhaps just that they popped up in http://www.sdsc.edu/~jeff/spam/cbc.html which I check from time to time. I haven't had the opportunity to look at their site much since it does "Evil $hit"(TM) that doesn't render in Netscape for Linux and locks up Opera for Linux. I had to use Konqueror just now to see their site. > If someone's using to block mail and you care about sending mail to > that recieipient, I'd be more inclined to call the receipient and > suggest he or she use some more competently run DNSBLs. Or just ask them to whitelist you, but it is kind of annoying that dnsrbl would list your server as a spam source, without making any evidence available on their site suggesting what caused them to form that opinion. -- Jon Lewis [EMAIL PROTECTED]| I route System Administrator| therefore you are Atlantic Net| _ http://www.lewis.org/~jlewis/pgp for PGP public key_
Re: receiving spam to NANOG-harvested archive message-id's
On 5/27/2003 at 3:26 PM, I wrote: > Speaking of the archives: www.nanog.org makes no reference to the list > archives at http://www.nanog.org/email.html any longer - where did they > go? humans finding and using it is desirable :) (rather than illegal web > harvesters) Thanks to a number of people, including List-Mom, that have pointed me to the right location: http://www.nanog.org/mailinglist.html and from there: http://www.cctec.com/maillists/nanog/index.html http://www.merit.edu/mail.archives/nanog/ It appears that http://www.nanog.org/isp.html is freshly redesigned and is not (yet) linking to the above page. And no, the archives have the headers stripped. Can't see the Message-ID's there. Hmm.
receiving spam to NANOG-harvested archive message-id's
I have received spam to a [EMAIL PROTECTED] address belonging to a post to NANOG 2 years ago: Date: Fri, 18 May 2001 13:59:06 -0400 From: Kai Schlichting <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: mobile.att.net MX meltdown Speaking of the archives: www.nanog.org makes no reference to the list archives at http://www.nanog.org/email.html any longer - where did they go? humans finding and using it is desirable :) (rather than illegal web harvesters)
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
> Despite attempts to contact DNSRBL / Namesystems I'm not receiving > any response at all - has anyone on the list any useful contacts? > (www.dnsrbl.com) - please reply off list. I know a lot of DNSBLs, and I've never heard of this one before, nor do I know anyone who uses it. Are you sure it's worth any effort at all to unlist yourself? Any fool can set up a DNSBL, many fools do, most aren't used by anyone. If someone's using to block mail and you care about sending mail to that recieipient, I'd be more inclined to call the receipient and suggest he or she use some more competently run DNSBLs.
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
On Tue, 27 May 2003, Mark Vevers wrote: > Justin, > > On Tuesday 27 May 2003 16:51, [EMAIL PROTECTED] wrote: > > I've checked all 3 MXs listed for vevers.net and none of them are listed > > in any DNSBLs I can see, including dnsrbl.net. > I work for an ISP - we have a number of mail exchangers - my domain is not > on the affected server and the particular server (194.238.48.13) is > still listed. Well, I've done some digging. I don't see any record of spam from that IP but I do see a piece of spam from a machine in that netblock in December. It would be nice if this DNSBL site would tell you why it was listed or at least provide the message(s) that got a given IP listed. > > I hate to ask the obvious but did you follow the instructions for removal > > on this page?http://www.dnsrbl.net/getremoved.html > Of course twice. > > Anyone on the list care to comment on the most effective way to get their > mailservers taken off unresponsive RBL's? (other than not let them be on there > in the first place). We think we know how this one happened but it would be > nice to know so that we can be sure we've plugged the hole - Typically good DNSBLs are quick to respond as long as the requesters work with them to resolve the issue. It sounds like you have and that dnsrbl.net is just unresponsive. I agree with another poster, ask NANAE for help (news.admin.net-abuse.email). Just remember, we anti-spammers are a sensitive breed but we're more than happy to work with providers as long as they are willing to work with us. Just state the facts and tell them that you can't get a response from dnsrbl.net by following the procedures on their website. That should do it. Oh, and provide the IP in question up front so they can check to see if it has a history. That might speed things along. > we were never > even informed that the server and had been listed in the first place - we > found out the hard way. If I was running a DNSBL I wouldn't tell you I listed you either. It's not their job to tell you. They are stating their opinion about an IP. They don't have to tell you when they form or change their opinion about that IP. If you don't want them to state an opinion about your IP, make sure it never does anything that they might wish to state an opinion about. > I do think that RBL's operators ought to at least > respond to legitimate attempts to clear up issue. I agree. They should be responsive. Ideally they'd provide an automated method of removal. That would really only work for misconfigured machines (open relays/proxies/SOCKS boxes, etc..) that can easily be retested to confirm they are fixed. Given how that DNSBL works, I take it that a piece of mail from that MX hit one of their honeypots and caused the listing. Whether that piece of mail was spam, an infected message, or what relies on when the dnsrbl.net start answering their mail. Best of luck Justin
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
mark have you seen any 'probes' from dnsrbl.net in response to your 'remove' request. Most RBL's probe with their tests as a response. When the tests don't work (or do work depending on the logic!) they should take you off the RBL fairly shortly. -- Martin Hepworth Senior Systems Administrator Solid State Logic Ltd +44 (0)1865 842300 Mark Vevers wrote: Justin, On Tuesday 27 May 2003 16:51, [EMAIL PROTECTED] wrote: I've checked all 3 MXs listed for vevers.net and none of them are listed in any DNSBLs I can see, including dnsrbl.net. I work for an ISP - we have a number of mail exchangers - my domain is not on the affected server and the particular server (194.238.48.13) is still listed. I hate to ask the obvious but did you follow the instructions for removal on this page?http://www.dnsrbl.net/getremoved.html Of course twice. Anyone on the list care to comment on the most effective way to get their mailservers taken off unresponsive RBL's? (other than not let them be on there in the first place). We think we know how this one happened but it would be nice to know so that we can be sure we've plugged the hole - we were never even informed that the server and had been listed in the first place - we found out the hard way. I do think that RBL's operators ought to at least respond to legitimate attempts to clear up issue. Regards Mark ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.mimesweeper.com **
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
On Tue, May 27, 2003 at 05:18:09PM +0100, Mark Vevers wrote: > > Anyone on the list care to comment on the most effective way to get their > mailservers taken off unresponsive RBL's? (other than not let them be on there The nanae newsgroup can be quite helpfull .. Kind Regards, Frank Louwers -- Openminds bvbawww.openminds.be Tweebruggenstraat 16 - 9000 Gent - Belgium
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
Justin, On Tuesday 27 May 2003 16:51, [EMAIL PROTECTED] wrote: > I've checked all 3 MXs listed for vevers.net and none of them are listed > in any DNSBLs I can see, including dnsrbl.net. I work for an ISP - we have a number of mail exchangers - my domain is not on the affected server and the particular server (194.238.48.13) is still listed. > I hate to ask the obvious but did you follow the instructions for removal > on this page?http://www.dnsrbl.net/getremoved.html Of course twice. Anyone on the list care to comment on the most effective way to get their mailservers taken off unresponsive RBL's? (other than not let them be on there in the first place). We think we know how this one happened but it would be nice to know so that we can be sure we've plugged the hole - we were never even informed that the server and had been listed in the first place - we found out the hard way. I do think that RBL's operators ought to at least respond to legitimate attempts to clear up issue. Regards Mark -- Mark Vevers. Principal Internet Engineer, Internet for Learning, Research Machines Plc AS 5503 -- Legal Disclaimer: Internet communications are not secure and therefore RM does not accept legal responsibility for the contents of this message. Any views or opinions presented are only those of the author and not those of RM. Please note that RM may intercept incoming and outgoing e-mail communications.
Re: [ifl.net #3657] Contact at: DNSRBL / Namesystems
On Tue, 27 May 2003, Mark Vevers wrote: > > Dear All, > > Despite attempts to contact DNSRBL / Namesystems I'm not receiving any > response at all - has anyone on the list any useful contacts? > (www.dnsrbl.com) - please reply off list. > > They're blacklisting one of our mail servers - I think for an issue that must > be at least two months old given that they are using an incorrect CNAME > in their list which hasn't existed for two at least two months - and I am > getting nothing but an automated response from their email addresses. Mark, I've checked all 3 MXs listed for vevers.net and none of them are listed in any DNSBLs I can see, including dnsrbl.net. http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=213.18.255.195 http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=213.18.248.74 http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=213.18.248.75 I hate to ask the obvious but did you follow the instructions for removal on this page? http://www.dnsrbl.net/getremoved.html Justin
