Re: [swinog] WG: URIBL.COM ACL Change for 195.141.232.251
Yes and Some companies are using our DNS for repication. Since then we have many DNS Requests. - Original Message - From: "Silvan Gebhardt" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 20, 2008 9:51 AM Subject: Re: [swinog] WG: URIBL.COM ACL Change for 195.141.232.251 Do you have clients using this DNS Server? I would see through the logs - someone with a mailserver is using this DNS Box for all DNS queries -> Has nothing to do with having mail services on it! S. Xaver Aerni schrieb: > Hello, > > We receive yesterday this mail. > It is verry interessing. This is our DNS Server and some > Webservices and Monitoring Tools. We havn't any Mail Services > on this Server. > Did somebody know about this new Rules > > Greetings Xaver > >> -Ursprüngliche Nachricht- >> Von: URIBL DNS Admin [mailto:[EMAIL PROTECTED] >> Gesendet: Sonntag, 19. Oktober 2008 22:48 >> An: [EMAIL PROTECTED] >> Betreff: URIBL.COM ACL Change for 195.141.232.251 >> >> Greetings, >> >> We are contacting you because you are identified as the >> technical or abuse contact for the IP address or domain listed below. >> >> We have made a policy change on the public mirrors that >> handle queries for multi.uribl.com. The following changes >> apply to the IP addresses listed below. >> >> IP Address: 195.141.232.251 >> PTR Record: ns2.pop.ch >> Current Policy: Allow >> New Policy: BLOCK - Positive Responses >> Effective : In 30 days >> >> If the new policy is to block queries from 195.141.232.251, >> and you are unaware that you are sending high volume queries >> to our public mirrors, or if you do not need the URIBL >> service, please make sure it is shut off on your high traffic >> filtering devices as not to flood the public dns system. >> >> If you recently upgraded to SpamAssassin 3.x, URIBL was >> included by default. It can easily be disabled by adding the >> following lines to your spamassassin/local.cf: >> >>score URIBL_BLACK 0 >>score URIBL_RED 0 >>score URIBL_GREY 0 >> >> If you are a high volume user and rely on URIBL to filter >> email, our commercial data feed service does allow you to >> obtain a copy of the >> data to query locally. Please see >> http://www.uribl.com/datafeed.shtml >> for more information on requesting the data feed service. >> >> If 195.141.232.251 is a primary resolver for many of your >> customers, there is a chance that a single client is >> accounting for a majority of the query volume we are seeing. >> If you can remove the heavy users on your end, and the volume >> drops to a manageable level, we will be willing to answer >> queries from 195.141.232.251. >> >> If you cannot make changes to the systems that are sending >> these queries, please forward this message to the appropriate >> person who can. URIBL may return positive replies for all >> queries if no action is taken after a reasonable amount of time. >> >> If you have any questions about this notification, you may >> reply to this email. >> >> Thank you for your time, >> >> -- >> URIBL DNS Admin >> [EMAIL PROTECTED] >> http://uribl.com >> >> >> >> > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] WG: URIBL.COM ACL Change for 195.141.232.251
Do you have clients using this DNS Server? I would see through the logs - someone with a mailserver is using this DNS Box for all DNS queries -> Has nothing to do with having mail services on it! S. Xaver Aerni schrieb: > Hello, > > We receive yesterday this mail. > It is verry interessing. This is our DNS Server and some > Webservices and Monitoring Tools. We havn't any Mail Services > on this Server. > Did somebody know about this new Rules > > Greetings Xaver > >> -Ursprüngliche Nachricht- >> Von: URIBL DNS Admin [mailto:[EMAIL PROTECTED] >> Gesendet: Sonntag, 19. Oktober 2008 22:48 >> An: [EMAIL PROTECTED] >> Betreff: URIBL.COM ACL Change for 195.141.232.251 >> >> Greetings, >> >> We are contacting you because you are identified as the >> technical or abuse contact for the IP address or domain listed below. >> >> We have made a policy change on the public mirrors that >> handle queries for multi.uribl.com. The following changes >> apply to the IP addresses listed below. >> >> IP Address: 195.141.232.251 >> PTR Record: ns2.pop.ch >> Current Policy: Allow >> New Policy: BLOCK - Positive Responses >> Effective : In 30 days >> >> If the new policy is to block queries from 195.141.232.251, >> and you are unaware that you are sending high volume queries >> to our public mirrors, or if you do not need the URIBL >> service, please make sure it is shut off on your high traffic >> filtering devices as not to flood the public dns system. >> >> If you recently upgraded to SpamAssassin 3.x, URIBL was >> included by default. It can easily be disabled by adding the >> following lines to your spamassassin/local.cf: >> >>score URIBL_BLACK 0 >>score URIBL_RED 0 >>score URIBL_GREY 0 >> >> If you are a high volume user and rely on URIBL to filter >> email, our commercial data feed service does allow you to >> obtain a copy of the >> data to query locally. Please see >> http://www.uribl.com/datafeed.shtml >> for more information on requesting the data feed service. >> >> If 195.141.232.251 is a primary resolver for many of your >> customers, there is a chance that a single client is >> accounting for a majority of the query volume we are seeing. >> If you can remove the heavy users on your end, and the volume >> drops to a manageable level, we will be willing to answer >> queries from 195.141.232.251. >> >> If you cannot make changes to the systems that are sending >> these queries, please forward this message to the appropriate >> person who can. URIBL may return positive replies for all >> queries if no action is taken after a reasonable amount of time. >> >> If you have any questions about this notification, you may >> reply to this email. >> >> Thank you for your time, >> >> -- >> URIBL DNS Admin >> [EMAIL PROTECTED] >> http://uribl.com >> >> >> >> > > ___ > swinog mailing list > swinog@lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] WG: URIBL.COM ACL Change for 195.141.232.251
Hello, We receive yesterday this mail. It is verry interessing. This is our DNS Server and some Webservices and Monitoring Tools. We havn't any Mail Services on this Server. Did somebody know about this new Rules Greetings Xaver > -Ursprüngliche Nachricht- > Von: URIBL DNS Admin [mailto:[EMAIL PROTECTED] > Gesendet: Sonntag, 19. Oktober 2008 22:48 > An: [EMAIL PROTECTED] > Betreff: URIBL.COM ACL Change for 195.141.232.251 > > Greetings, > > We are contacting you because you are identified as the > technical or abuse contact for the IP address or domain listed below. > > We have made a policy change on the public mirrors that > handle queries for multi.uribl.com. The following changes > apply to the IP addresses listed below. > > IP Address: 195.141.232.251 > PTR Record: ns2.pop.ch > Current Policy: Allow > New Policy: BLOCK - Positive Responses > Effective : In 30 days > > If the new policy is to block queries from 195.141.232.251, > and you are unaware that you are sending high volume queries > to our public mirrors, or if you do not need the URIBL > service, please make sure it is shut off on your high traffic > filtering devices as not to flood the public dns system. > > If you recently upgraded to SpamAssassin 3.x, URIBL was > included by default. It can easily be disabled by adding the > following lines to your spamassassin/local.cf: > >score URIBL_BLACK 0 >score URIBL_RED 0 >score URIBL_GREY 0 > > If you are a high volume user and rely on URIBL to filter > email, our commercial data feed service does allow you to > obtain a copy of the > data to query locally. Please see > http://www.uribl.com/datafeed.shtml > for more information on requesting the data feed service. > > If 195.141.232.251 is a primary resolver for many of your > customers, there is a chance that a single client is > accounting for a majority of the query volume we are seeing. > If you can remove the heavy users on your end, and the volume > drops to a manageable level, we will be willing to answer > queries from 195.141.232.251. > > If you cannot make changes to the systems that are sending > these queries, please forward this message to the appropriate > person who can. URIBL may return positive replies for all > queries if no action is taken after a reasonable amount of time. > > If you have any questions about this notification, you may > reply to this email. > > Thank you for your time, > > -- > URIBL DNS Admin > [EMAIL PROTECTED] > http://uribl.com > > > > ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
