On Mar 29, 2004, at 11:32 AM, Aron S. Spencer wrote:
When reporting a spam that got through to SpamCop, I noticed the following in the report:
82.166.26.217 listed in cbl.abuseat.org ( 127.0.0.2 ) 82.166.26.217 is an open proxy
[snip]
Here is the log entry for the spam in question (it seems to be the case on about 1/2 the spam that gets through, so this is only a representative case):
23:45:33 3 SMTP-370(NOON-BL31RUG96I) Failed to verify. Real address is [82.166.26.217:4665]
23:45:41 2 SMTP-370([82.166.26.217]) {S.0001662901} received, 1169 bytes
They were apparently added to the DNSBLs after you received the spam. The addition was probably as a result of this spam.
<http://cbl.abuseat.org/lookup.cgi?ip=82.166.26.217&.submit=Lookup>
IP Address 82.166.26.217 was found in the CBL.
It was detected at 2004-03-29 05:00 GMT (+/- 30 minutes).
<http://dsbl.org/listing?82.166.26.217>
Status
IP: 82.166.26.217 State: Listed Listed in unconfirmed (unconfirmed.dsbl.org): yes Listed in singlehop (list.dsbl.org): yes Listed in multihop (multihop.dsbl.org): no Record last changed: 2004/Mar/29 07:39:39 UTC Server identifies itself as: [82.166.26.217] Reverse DNS identifies server as: 82-166-26-217.barak.net.il
History
2004/Mar/29 07:39:39 UTC Listed in Unconfirmed (view message) 2004/Mar/29 07:39:39 UTC Listed in Singlehop (view message)
Messages from this Host
2004/Mar/29 07:39:39 UTC (view message) socks4
I get this, too. Unfortunately, some of us get hit before the addresses are added to the DNSBLs we use. That's one of the reasons I use spamtraps as well.
HTH, Tim -- Timothy Binder Director, President-Elect Philadelphia Science Fiction Society <http://www.psfs.org/> Upcoming Guests: Warren Lapine, James Morrow, John Passarella
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
