Re: Problems with sorbs and this list Fwd: Re: What blacklists are you using at your MTA?
On 03.04.11 21:56, dar...@chaosreigns.com wrote: If you go through the garbage required to register to get to the contents of this link, you'll see that this IP hits two listings, Escalated entries, and DUHL entries, both of which are colored green, which it says means Historical Listings (inactive). But it's still listed: $ host 171.225.210.67.dnsbl.sorbs.net 171.225.210.67.dnsbl.sorbs.net has address 127.0.0.10 - Forwarded message from Jonathan Nichols jnich...@pbp.net - users@spamassassin.apache.org: host mx1.eu.apache.org[192.87.106.230] said: 550 Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?67.210.225.171 (in reply to RCPT TO command) - End forwarded message - oh... with 300 TTL we should better not trust you this is NOT dynamic IP. It's one of things mentioned at SORBS page... 171.225.210.67.in-addr.arpa. 300 IN PTR heap.pbp.net. ;; AUTHORITY SECTION: 225.210.67.in-addr.arpa. 300IN NS heap.pbp.net. ;; ADDITIONAL SECTION: heap.pbp.net. 300 IN A 67.210.225.171 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95
Problems with sorbs and this list Fwd: Re: What blacklists are you using at your MTA?
Figured I'd forward this along, since he can't post to the list due apparently to this list's use of sorbs. The IP address I got it from was 67.210.225.171. Interestingly, sorbs' website says it's not actively listed, but their DNS zone says otherwise. And their website conveys a general state of brokenness. And requires too damn much personal information to be able to do anything. (I did end up disabling sorbs and enabling psbl at my MTA.) And I don't know anything about this guy or this IP other than what was just emailed to me here. Other than it has a DNSWL rank of low, which could easily mean we know nothing bad about it, but just haven't had enough info to increase its rank. And it has no DNSWL abuse reports. - Forwarded message from Jonathan Nichols jnich...@pbp.net - Date: Sun, 3 Apr 2011 18:45:56 -0500 From: Jonathan Nichols jnich...@pbp.net To: dar...@chaosreigns.com Cc: users@spamassassin.apache.org Subject: Re: What blacklists are you using at your MTA? X-DNSWL: low pbp.net DNSWLId 23144 On Apr 2, 2011, at 8:24 PM, dar...@chaosreigns.com wrote: I'm curious what blacklists other people are currently using at their MTA, rejecting during delivery, before mail gets to spamassassin. For a while I've been using zen.spamhaus.org and dnsbl.sorbs.net. Based on recent stats ( http://ruleqa.spamassassin.org/?daterev=20110319 ) I think I'm dropping sorbs and adding psbl.surriel.com. At the MTA? None at the moment, and I have no idea if this will reach you since SORBS still has my entire netblock incorrectly listed as dynamic and they absolutely refuse to communicate about it - or address the issue. The irony. I cannot write to the Spamassassin list because Apache.org is using SORBS - which is broken and is incorrectly flagging clean IPs still. Thus limiting my ability to communicate with peers and help address the spam problem I have going on.. one that SORBS sure hasn't helped. The IPs that are spamming me? Listed clean in SORBS. :/ - End forwarded message - -- I love God. He's so deliciously evil. - Stewie Griffin, Family Guy 2x02 http://www.ChaosReigns.com
Re: Problems with sorbs and this list Fwd: Re: What blacklists are you using at your MTA?
If you go through the garbage required to register to get to the contents of this link, you'll see that this IP hits two listings, Escalated entries, and DUHL entries, both of which are colored green, which it says means Historical Listings (inactive). But it's still listed: $ host 171.225.210.67.dnsbl.sorbs.net 171.225.210.67.dnsbl.sorbs.net has address 127.0.0.10 - Forwarded message from Jonathan Nichols jnich...@pbp.net - users@spamassassin.apache.org: host mx1.eu.apache.org[192.87.106.230] said: 550 Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?67.210.225.171 (in reply to RCPT TO command) - End forwarded message - -- ...this thing we call 'failure' is not the falling down, but the staying down. - Mary Pickford http://www.ChaosReigns.com
