[vox-tech] smtp question - blocked ip

[Steven Peck]

Yes well, it's enough to prevent Pete from emailing out.  I like
DNSStuff.com, it's a great resource.

Spamhaus blocked Pacbell DSL ip addresses.  Evidently they felt that =
PacBell
has been ignoring there complaints regarding a few persistent spammers.  =
If I
thought I could get away with it here at work, I would probably block =
PacBell
DSL too.

I got 100,000 SPAM messages through my system at work over New Years Day =
from
a PacBell dsl ip address.

I average 150,000-200,000 a week from various open relays abroad, but =
the guy
screws up periodically and leaves enough info to trace him to a PacBell =
ip
address on occasion.  It changes so he's probably pppoe.  As we add =
reduncy
to entry points on our email system and expand the scope to the =
Enterprise, I
will prbably see a dramatic increase.  The sad part is, a lot of it is =
to non
existant email addresses.  SO not only is the spammer irratating me, he =
is
ripping off his customer.

<sigh>
-sp


-----Original Message-----
From: Rod Roark [mailto:rod@sunsetsystems.com]
Sent: Friday, January 03, 2003 9:35 AM
To: vox-tech@lists.lugod.org
Subject: Re: [vox-tech] smtp question - blocked ip


They blacklisted Pac Bell?  Now there's a nice example of=20
spitting into the wind.  :-)

-- Rod
   http://www.sunsetsystems.com/

On Friday 03 January 2003 09:15 am, Steven Peck wrote:
> The reciever is setup to use a block list by ip address.  So, lookup =
your
> MX and/or IP Address in a lookup site.
> For all potential email block/spam problems, I turn to
> www.dnsstuff.com
>
> The MX for dirac.org is 'mail.dirac.org'
> The IP is 64.164.47.8'
>
> Looking up the IP Address at DNSStuff gets you
> http://www.dnsstuff.com/tools/ip4r.ch?ip=3D64.164.47.8
>
> Your IP is listed in spambag.org's email blocklist
> http://www.spambag.org/cgi-bin/spambag?mailfrom=3Dpacbell
>
> Pete, you spammer you. :) j/k
> Best of luck getting off of it seeing as it is a PacBell IP netblock.
> Your best hope is if 'netease.net' can whitelist your ip address.
>
> -sp
>
> -----Original Message-----
> From: Peter Jay Salzman [mailto:p@dirac.org]
> Sent: Friday, January 03, 2003 8:51 AM
> To: vox-tech@lists.lugod.org
> Subject: [vox-tech] smtp question - blocked ip
>
>
> can someone give me a more useful description of the problem here?  =
who
> is blocking whom?  it sounds like my MTA rejected sending email to
> netease, but ORDB and tcp wrappers for exim (which i use) should block
> incoming mail from spammers, not outgoing mail to spammers.
>
> at least, i'm pretty sure about that...
>
> pete
>
> sorry for terse message, but i'm still on a 14.4.....
>
> ----- Forwarded message from Mail Delivery System =
<Mailer-Daemon@dirac.org>
> -----
>
> From: Mail Delivery System <Mailer-Daemon@dirac.org>
> To: p@dirac.org
> Subject: Mail delivery failed: returning message to sender
> Date: Fri, 03 Jan 2003 08:42:07 -0800
>
> This message was created automatically by mail delivery software =
(Exim).
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) =
failed:
>
>   cdavis@netease.net
>     SMTP error from remote mailer after RCPT TO:<cdavis@netease.net>:
>     host mx02.netease.net [64.7.232.14]: 554
> <adsl-64-164-47-8.dsl.scrm01.pacbell.net[64.164.47.8]>:
>     Client host rejected: ACL IP Blocked; (5.7.1) Policy Violation =
1205

_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech