As far as trustworthy goes, I trust osirusoft to pretty much list everyone 
that's questionable and all their neighbors. I don't trust it to be low 
collateral damage, hence I don't use them as a flat-out blocklist, and I 
generally assign them fewer SA points than the default.

In your case, don't email osirusoft.. you're not in the lists they directly 
maintain. (there are some list they directly maintain, you're not on one)

Go to http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=212.113.196.7

In specific, note:
If you're not listed as a 127.0.0.2 or 127.0.0.3 please don't bother the 
administrator of relays.osirusoft.com

You're listed 127.0.0.4, which is a composite of pretty much every 
blocklist out there, including high collateral damage ones.

The listing is actually by spews, a list osirusoft mirrors as a part of 
their composite, but does not directly maintain. Spews is fairly high 
collateral damage, but the spews record covering your netblock is:

http://spews.org/html/S1400.html

Sounds like your netblock has some very unwelcome neighbors, and an ISP 
(primekom.de) that is unwilling or unable to disconnect them. It would 
appear that at least one of the unsavory spammer's servers is still hosted 
via primekom.

mail.thebestpills.com.  86400   IN      A       213.139.79.81

A quick summary of primekom's position on the spammer:

 >From: "Gabrielides Georg" <[EMAIL PROTECTED]>
 >Date: Tue, 30 Apr 2002 18:20:06 +0200
 >Dear sirs,
 >
 >the problem is, that our customer is not acting against german or
 >european law, so it is difficult to close the domain, especially
 >it is not proof he is the origin of the spam.
 >
 >please tell the open-relays to close.
 >
 >
 >mfg
 >Georg Gabrielides


As far as I know, pretty much the only way out of SPEWS is to post to NANAE 
and survive the resulting public dismantling of your claims as to why you 
shouldn't be listed. In this case, you'll likely have to prove that 
Primekom is not a spam-friendly ISP, or that your netblock is not actually 
handled by Primekom. This is not going to be an easy task.

High collateral damage as it is, Spews takes the stand that if an ISP is 
knowingly hosting a spammer and is unwilling to disconnect them, the whole 
ISP is questionable. Of course, if the ISP really is willing to host 
spammers, more of them will quickly flock to their netblock. They are not 
likely to accept a "my ISP knowingly hosts spammers, but I'm not one" 
argument. Quite frankly, I'd question why I was doing business with Primekom.



At 12:31 PM 9/26/2002 +0100, Darren Coleman wrote:
>Hi,
>
>Having received several complaints from customers this morning I was shocked
>to discover that several of our mail servers are blacklisted on
>relays.osirusoft.com and spews.relays.osirusoft.com.  Further investigation
>showed that not only is our entire block of IPs (20 or so Class Cs) listed,
>but the ENTIRE 212.113.x.x Class B range as well.
>
>Has anyone had any experience of dealings with Osirusoft and can
>comment/suggest a course of action?  Their website doesn't seem to provide
>any specific contact information and - and this would be funny if it weren't
>tragic - attempting to email [EMAIL PROTECTED] in order to get our
>server automatically removed results in... yes, you've guessed it, a bounce
>message coming back because our server is listed.
>
>Daz



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to