Question about URIDNSBL

2005-02-08 Thread Eli Yukelzon
Good day.

I've been having some problems with URIDNSBL plugin for Spam Assassin.
One of blocked mail came from emailframer.com . 
After investigating issue this came up:

host -t ns emailframer.com
emailframer.com name server ns1.barak.net.il.
emailframer.com name server ns.barak.net.il.
 
host -t a ns.barak.net.il
ns.barak.net.il has address 212.150.48.169
 
And this brough me to:

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL22121

The problem is - barak.net.il is one of the MAJOR Israel's ISPs, 
and since MANY hosts have NS record matching it, this SBL record
block ALL sites hosted on it.

To solve this problem (temporary ofcourse) i've disabled 
NS lookups in the plugin.

What I wanted to know - is this an expected behaviour? 
If so - how to handle this situation?

Best regards,

Eli Yukelzon



Re: Question about URIDNSBL

2005-02-08 Thread Jeff Chan
On Tuesday, February 8, 2005, 2:58:32 AM, Eli Yukelzon wrote:
 http://www.spamhaus.org/SBL/sbl.lasso?query=SBL22121

 The problem is - barak.net.il is one of the MAJOR Israel's ISPs, 
 and since MANY hosts have NS record matching it, this SBL record
 block ALL sites hosted on it.

Please complain to Barak that their customer walla.com is sending
spam.  The problem is not really with SpamHaus but that Barak
apparently continues to allow walla.com to be mentioned in
thousands of reported spam (and probably many times that
unreported).  SpamHaus is simply noting that fact.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/



Re: Question about URIDNSBL

2005-02-08 Thread Jeff Chan
On Tuesday, February 8, 2005, 5:08:32 AM, Jeff Chan wrote:
 Please complain to Barak that their customer walla.com is sending
 spam.  The problem is not really with SpamHaus but that Barak
 apparently continues to allow walla.com to be mentioned in
 thousands of reported spam (and probably many times that
 unreported).  SpamHaus is simply noting that fact.

For approximately 6000 examples, see:

http://groups-beta.google.com/group/news.admin.net-abuse.sightings/search?group=news.admin.net-abuse.sightingsq=walla.comqt_g=1searchnow=Search+this+group

to search walla.com on Usenet newsgroup
news.admin.net-abuse.sightings

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/