Re: Verizon mail server on MAPS RSS list

2003-03-28 Thread Christopher X. Candreva

On Thu, 27 Mar 2003, Josh Gentry wrote:

>
> We've got customers trying to receive email from people using Verizon for
> Internet acess, and we are rejecting that mail because
> out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list.  Can't pull
> up the MAPS RSS website at the moment to check why.  Anyone know contact
> info for Verizon for this kind of issue?

This server is an open relay. It's been on RSS since Sept. It's also on
njabl.org, and their web site is responding more quickly.

Verizon has been contacted many times about this and either doesn't care or
just doesn't know how to fix it.  In fact, the MAPS page has a specific
message that they must be contacted by a Verizon rep to have it removed.

It will relay for anyone who gives a @verizon.net return address.

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


Re: Verizon mail server on MAPS RSS list

2003-03-27 Thread Jack Bates

[EMAIL PROTECTED] wrote:
> If you're going to use a dnsbl, anybody's dnsbl, figure out how to
> whitelist first (or real soon after), because this sort of thing will
> happen from time to time.
>
Or learn how to tell people that spam is evil and under no circumstances
will you accept spam from a system that sends it out in mass volume. If an
AS became insecure and could start allowing anyone to setup new netbock
advertisements from it, you would filter out the AS. If it was small, you
might hardcode in the valid netblocks, but when it's a large AS, you tend
just to shut it all down. Such is the way with smtp.


--
-Jack



Re: Verizon mail server on MAPS RSS list

2003-03-27 Thread jlewis

On Thu, 27 Mar 2003, Josh Gentry wrote:

> We've got customers trying to receive email from people using Verizon for
> Internet acess, and we are rejecting that mail because
> out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list.  Can't pull
> up the MAPS RSS website at the moment to check why.  Anyone know contact
> info for Verizon for this kind of issue?

MAPS RSS is a list of open relays, no?  It's a pretty good guess that the 
above mentioned server is therefore an open relay...and it's a correct one 
in this case.

http://www.njabl.org/cgi-bin/lookup.cgi?query=206.46.170.44
http://openrbl.org/ip/206/46/170/44.htm

If you're going to use a dnsbl, anybody's dnsbl, figure out how to 
whitelist first (or real soon after), because this sort of thing will 
happen from time to time.

--
 Jon Lewis [EMAIL PROTECTED]|  I route
 System Administrator|  therefore you are
 Atlantic Net|  
_ http://www.lewis.org/~jlewis/pgp for PGP public key_



Re[2]: Verizon mail server on MAPS RSS list

2003-03-27 Thread Richard Welty

On Thu, 27 Mar 2003 13:24:06 -0800 (PST) Jay Hennigan <[EMAIL PROTECTED]> wrote:
> Verizon allows anyone who forges an @verizon.net From: address
> to relay through their servers.  This behavior is intentional.

ah. then they will find it "challenging" to get off of anybody's open relay
list.

richard
  (just fixed one of those types of open relay at a customer's site)
--
Richard Welty [EMAIL PROTECTED]
Averill Park Networking 518-573-7592
  Unix, Linux, IP Network Engineering, Security




Re: Verizon mail server on MAPS RSS list

2003-03-27 Thread Vinny Abello
At 03:59 PM 3/27/2003 -0500, Richard Welty wrote:


On Thu, 27 Mar 2003 13:40:00 -0700 Josh Gentry <[EMAIL PROTECTED]> wrote:
> We've got customers trying to receive email from people using Verizon for
> Internet acess, and we are rejecting that mail because
> out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list.  Can't
> pull
> up the MAPS RSS website at the moment to check why.  Anyone know contact
> info for Verizon for this kind of issue?
maps RSS is open relays.

try the abuse.net relay tester on the BL'd IP and see what it turns up,

   http://www.abuse.net/relay.html
Looks like that IP is on quite a few lists actually...

http://rbls.org/?q=206.46.170.44

Must be a very abused Verizon mail server, possibly one of many...

Vinny Abello
Network Engineer
Server Management
[EMAIL PROTECTED]
(973)300-9211 x 125
(973)940-6125 (Direct)
PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0  E935 5325 FBCB 0100 977A
Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com (888)TELLURIAN
There are 10 kinds of people in the world. Those who understand binary and 
those that don't.



Re: Verizon mail server on MAPS RSS list

2003-03-27 Thread Richard Welty

On Thu, 27 Mar 2003 13:40:00 -0700 Josh Gentry <[EMAIL PROTECTED]> wrote:
> We've got customers trying to receive email from people using Verizon for
> Internet acess, and we are rejecting that mail because
> out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list.  Can't
> pull
> up the MAPS RSS website at the moment to check why.  Anyone know contact
> info for Verizon for this kind of issue?

maps RSS is open relays.

try the abuse.net relay tester on the BL'd IP and see what it turns up,

   http://www.abuse.net/relay.html

richard
--
Richard Welty [EMAIL PROTECTED]
Averill Park Networking 518-573-7592
  Unix, Linux, IP Network Engineering, Security




Verizon mail server on MAPS RSS list

2003-03-27 Thread Josh Gentry

We've got customers trying to receive email from people using Verizon for
Internet acess, and we are rejecting that mail because
out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list.  Can't pull
up the MAPS RSS website at the moment to check why.  Anyone know contact
info for Verizon for this kind of issue?

Thanks.

Josh
-- 
Josh Gentry  (Call me Gentry.) 
[EMAIL PROTECTED] * [EMAIL PROTECTED] *  505-232-7992