David B Funk <dbf...@engineering.uiowa.edu> writes:

> The other thing you should do is to report false-positives to the
> dnswl.org site.
> See: https://www.dnswl.org/?page_id=17

That's great advice.  I have found over the years that DNSWL is well
run, and I'm confident that if a listed machine is emitting spam and
it's reported, then it would either get delisted or fixed very fast.

> You first might want to verify that your FPs aren't being generated by
> some upstream relay that is is trusted but due to some configuration
> issue is "masking" the spam source.

The kind of places that get listed in HI tend to be well-managed.

> If you put a copy of one of the offending spams in pastebin.com and
> post the URL here we can look at it with you to see if we can spot
> your issue.

Putting the spam in a pastebin will let other people do a test scoring
run and that will likely shed some light on the situation.

Also, check how your DNS is set up.  While DNSBLs in general don't want
to return false results on purpose, when they get abused with high query
rates there are not a lot of options to get people to stop.

Attachment: signature.asc
Description: PGP signature

Reply via email to