You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michael Scheidell <sc...@secnap.net> on 2008/02/22 22:22:34 UTC
Pbl.spamhaus.org down?
Been down long?
93.244.183.212.pbl.spamhaus.org
server ns8.spamhaus.org
Default server: ns8.spamhaus.org
Address: 216.168.28.44#53
> 93.244.183.212.pbl.spamhaus.org
Server: ns8.spamhaus.org
Address: 216.168.28.44#53
Non-authoritative answer:
*** Can't find 93.244.183.212.pbl.spamhaus.org: No answer
If you find it works for you, restart your name server (flush cache) and try
again.
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
> From: SM <sm...@resistor.net>
> Date: Fri, 22 Feb 2008 15:06:23 -0800
> To: Michael Scheidell <sc...@secnap.net>, <us...@spamassassin.apache.org>
> Subject: Re: Pbl.spamhaus.org down?
>
> This is odd. A query to zen.spamhaus.org returned two answers.
You don't want to query .zen... Since it is a subzone. You want to query
the 'ns' record type:
host -t ns zen.spamhaus.org
zen.spamhaus.org name server 1.ns.spamhaus.org.
zen.spamhaus.org name server 8.ns.spamhaus.org.
zen.spamhaus.org name server a.ns.spamhaus.org.
zen.spamhaus.org name server b.ns.spamhaus.org.
zen.spamhaus.org name server c.ns.spamhaus.org.
zen.spamhaus.org name server d.ns.spamhaus.org.
zen.spamhaus.org name server f.ns.spamhaus.org.
zen.spamhaus.org name server g.ns.spamhaus.org.
zen.spamhaus.org name server h.ns.spamhaus.org.
zen.spamhaus.org name server i.ns.spamhaus.org.
zen.spamhaus.org name server k.ns.spamhaus.org.
zen.spamhaus.org name server l.ns.spamhaus.org.
zen.spamhaus.org name server m.ns.spamhaus.org.
zen.spamhaus.org name server o.ns.spamhaus.org.
zen.spamhaus.org name server q.ns.spamhaus.org.
zen.spamhaus.org name server r.ns.spamhaus.org.
zen.spamhaus.org name server s.ns.spamhaus.org.
zen.spamhaus.org name server t.ns.spamhaus.org.
zen.spamhaus.org name server x.ns.spamhaus.org.
zen.spamhaus.org name server y.ns.spamhaus.org.
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by SM <sm...@resistor.net>.
At 14:35 22-02-2008, Michael Scheidell wrote:
>In fact, I found several sites (different networks, not mine) where it
>doesn't work.
>(I don't query more than 10,000 per day)
>
>The one that works best is the one that is doing 150K queries per day.
>Figure that.
>
>tried: each and every one of them.
>Am I blocked? Did I piss someone off? Im not blocked because of 'excessive'
>use.
It doesn't look like a network issue. It's more like a block.
This is odd. A query to zen.spamhaus.org returned two answers.
Regards,
-sm
Calling sambas did you firewall me? was: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
Sambas folks: (sorry, if someone knows someone, please fwd this. I didn't
see any 'technical' contacts on their web site and I don't want to 'spam'
them. Technical contact via whois says: dom-oce-2632@spamhaus.mu lets try
that.
Hey, google me. Go back to fdma.com days. I fought (hard) the usenet spam
ways. Worked with chris lewis (tinc). Why have you firewalled my class c
address from pbl.spamhaus.org lookups? (204.89.241.0/24).
I don't do excessive lookups, if I did, you never told me.
I hate spammers. I don't spam. I use SpamAssassin, (I am the official
port maintainer for the freebsd SA port). I am a charter member of the ICSA
labs anti-spam consortium. We are writing the specifications to certify
anti-spam appliances. What gives? What did I do wrong?
> From: "Daryl C. W. O'Shea" <sp...@dostech.ca>
> Organization: DOS Technologies
> Date: Fri, 22 Feb 2008 17:52:02 -0500
> To: Michael Scheidell <sc...@secnap.net>
> Cc: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
> Subject: Re: Pbl.spamhaus.org down?
>
> Michael Scheidell wrote:
>> In fact, I found several sites (different networks, not mine) where it
>> doesn't work.
>> (I don't query more than 10,000 per day)
>
> Perhaps, they're having a flare up of DDoS volume?
10,000 ip lookups a day is a DDOS?
9 sl-tisca1-198665-0.sprintlink.net (144.223.246.194) 44.648 ms 44.747 ms
44.766 ms
10 xe-0-0-0.ams10.ip.tiscali.net (89.149.186.233) 120.280 ms 126.279 ms
xe-0-1-0.ams10.ip.tiscali.net (89.149.186.237) 120.231 ms
11 tiscali-nl-gw.ip.tiscali.net (213.200.75.62) 123.902 ms 123.862 ms
124.010 ms
12 * * *
13 * * *
14 *
11 tiscali-nl-gw.ip.tiscali.net (213.200.75.62) 123.902 ms 123.862 ms
124.010 ms
12 * * *
13 * * *
14 * * *
15 194.151.244.73 (194.151.244.73) 124.081 ms 123.131 ms 122.930 ms
16 spamhaus.bl.xs4all.nl (194.109.9.7) 122.947 ms 125.255 ms 123.641 ms
>From office: (204.89.241.135)
host 93.244.183.212.pbl.spamhaus.org spamhaus.bl.xs4all.nl
;; connection timed out; no servers could be reached
>From home:
host 93.244.183.212.pbl.spamhaus.org spamhaus.bl.xs4all.nl
Using domain server:
Name: spamhaus.bl.xs4all.nl
Address: 194.109.9.7#53
Aliases:
93.244.183.212.pbl.spamhaus.org has address 127.0.0.11
Everything else works:
host www.spamhaus.org
www.spamhaus.org has address 64.124.52.228
www.spamhaus.org has address 216.168.30.71
host -t mx spamhaus.org
spamhaus.org mail is handled by 10 smtp-ext-layer.spamhaus.org.
They accept my email:
telnet smtp-ext-layer.spamhaus.org 25
Trying 216.168.28.45...
Connected to smtp-ext-layer.spamhaus.org.
Escape character is '^]'.
220 smtp-ext-layer.spamhaus.org ESMTP Sat, 23 Feb 2008 12:57:48 +0000
helo scanner.secnap.net
250 smtp-ext-layer.spamhaus.org Hello scanner.secnap.net [204.89.241.64]
mail from: <sc...@secnap.net>
250 OK
rcpt to: <po...@spamhaus.org>
250 Accepted
So, what gives?
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
Michael Scheidell wrote:
> In fact, I found several sites (different networks, not mine) where it
> doesn't work.
> (I don't query more than 10,000 per day)
Perhaps, they're having a flare up of DDoS volume?
> The one that works best is the one that is doing 150K queries per day.
> Figure that.
>
> tried: each and every one of them.
> Am I blocked? Did I piss someone off? Im not blocked because of 'excessive'
> use.
Traceroutes to a.ns.spamhaus.org from two of my hosts with no issue.
The first in Ontario, CAN, the other in Atlanta GA, USA.
[dos@cyan dos]$ traceroute a.ns.spamhaus.org
traceroute to a.ns.spamhaus.org (192.150.94.204), 30 hops max, 40 byte
packets
1 10.145.1.123 (10.145.1.123) 0.611 ms 0.552 ms 0.542 ms
2 10.83.83.9 (10.83.83.9) 2.087 ms 2.063 ms 1.687 ms
3 10.83.83.10 (10.83.83.10) 3.911 ms 2.711 ms 3.856 ms
4 10.83.83.1 (10.83.83.1) 3.826 ms 4.227 ms 3.544 ms
5 10.77.32.1 (10.77.32.1) 32.017 ms * *
6 gw01.clwd.phub.net.cable.rogers.com (66.185.90.233) 52.975 ms *
47.705 ms
7 gi-3-0.gw01.clwd.phub.net.cable.rogers.com (66.185.81.109) 44.669
ms * *
8 so-4-2-2.gw02.mtnk.phub.net.cable.rogers.com (66.185.82.10) 46.694
ms * 42.390 ms
9 * pos-2-0.igw01.ny8th.phub.net.cable.rogers.com (66.185.81.102)
61.536 ms 61.722 ms
10 66.185.92.26 (66.185.92.26) 70.580 ms 73.000 ms 72.563 ms
11 so-6-0-0-dcr2.nyk.cw.net (195.2.10.242) 62.772 ms 61.832 ms *
12 * * *
13 so-7-0-0-dcr2.amd.cw.net (195.2.10.250) 183.714 ms * 187.059 ms
14 as0-dcr1.amd.cw.net (195.2.10.153) 146.955 ms 149.823 ms 188.660 ms
15 surfnet-gw2.amd.cw.net (195.2.21.6) 188.940 ms 194.290 ms *
16 * TZ-500.XSR01.Amsterdam2A.surf.net (145.145.80.41) 183.823 ms
180.910 ms
17 onweer.surfnet.nl (145.145.19.14) 161.153 ms 160.663 ms 157.453 ms
18 * * *
19 * * *
20 * * *
[dos@wally dos]$ traceroute a.ns.spamhaus.org
traceroute: Warning: a.ns.spamhaus.org has multiple addresses; using
192.150.94.204
traceroute to a.ns.spamhaus.org (192.150.94.204), 30 hops max, 38 byte
packets
1 69.61.78.1 (69.61.78.1) 0.374 ms 0.904 ms 0.232 ms
2 66.154.81.29 (66.154.81.29) 0.969 ms 0.830 ms 0.847 ms
3 66.154.95.194 (66.154.95.194) 0.740 ms 0.683 ms 0.723 ms
4 64.214.143.1 (64.214.143.1) 1.224 ms 1.121 ms 0.930 ms
5 64.209.105.158 (64.209.105.158) 98.909 ms 98.981 ms 98.875 ms
6 TF-500.XSR01.Amsterdam2A.surf.net (145.145.80.33) 99.580 ms 99.504
ms 99.341 ms
7 onweer.surfnet.nl (145.145.19.14) 98.433 ms 98.356 ms 98.284 ms
8 * * *
9 * * *
10 * * *
Daryl
Re: Pbl.spamhaus.org down?
Posted by Duane Hill <d....@yournetplus.com>.
On Fri, 22 Feb 2008 17:02:11 -0800
Bob Amen <am...@oreilly.com> wrote:
> Michael Scheidell wrote:
> > >Works fine for me. Are you sure you weren't blocked?
> >
> >
> > In fact, I found several sites (different networks, not mine) where
> > it doesn't work.
> > (I don't query more than 10,000 per day)
> >
> > The one that works best is the one that is doing 150K queries per
> > day. Figure that.
> >
> > tried: each and every one of them.
> > Am I blocked? Did I piss someone off? Im not blocked because of
> > 'excessive' use.
> >
>
> Quite possibly. I think they're getting stricter regarding their
> fair use policy. One of my servers was blocked while another wasn't
> even though the latter was just as high volume. I suspect the other
> server would have been blocked had I not opted for their paid service.
That could be.
> I highly recommend their paid service anyway. It ends up working
> much faster because all queries are local (rbldnsd). We should
> support their work too and it's not very expensive.
I have not seen this interruption. Then again, we do subscribe to their
datafeed service ourselves. Rsync has been operating without
interruption as the last timestamps indicate.
This is the rejection count for yesterday using zen.spamhaus.org
(which includes the time frame when the OP had issues):
[d.hill@sg1 ~]$ bzegrep "spamhaus\.org" /var/log/maillog.0.bz2 |wc -l
2971023
-------
_|_
(_| |
Re: Pbl.spamhaus.org down?
Posted by Bob Amen <am...@oreilly.com>.
Duane Hill wrote:
> On Fri, 22 Feb 2008 17:02:11 -0800
> Bob Amen <am...@oreilly.com> wrote:
>
>
>> Michael Scheidell wrote:
>>
>>>> Works fine for me. Are you sure you weren't blocked?
>>>>
>>>
>>>
>>> In fact, I found several sites (different networks, not mine) where
>>> it doesn't work.
>>> (I don't query more than 10,000 per day)
>>>
>>> The one that works best is the one that is doing 150K queries per
>>> day. Figure that.
>>>
>>> tried: each and every one of them.
>>> Am I blocked? Did I piss someone off? Im not blocked because of
>>> 'excessive' use.
>>>
>>>
>> Quite possibly. I think they're getting stricter regarding their
>> fair use policy. One of my servers was blocked while another wasn't
>> even though the latter was just as high volume. I suspect the other
>> server would have been blocked had I not opted for their paid service.
>>
>
> So, you have paid for their services? Per their agreement, you should
> be able to distribute the zones across servers within your
> organization. That is what we are doing. Our SpamHaus zones _ONLY_
> resolve within our network (not to the outside world).
Yes, that's what we do. The blockage was before we decided to buy
their services.
Bob
--
Bob Amen
O'Reilly Media, Inc.
http://www.ora.com/
http://www.oreilly.com/
Re: Pbl.spamhaus.org down?
Posted by Duane Hill <d....@yournetplus.com>.
On Fri, 22 Feb 2008 17:02:11 -0800
Bob Amen <am...@oreilly.com> wrote:
> Michael Scheidell wrote:
> > >Works fine for me. Are you sure you weren't blocked?
> >
> >
> > In fact, I found several sites (different networks, not mine) where
> > it doesn't work.
> > (I don't query more than 10,000 per day)
> >
> > The one that works best is the one that is doing 150K queries per
> > day. Figure that.
> >
> > tried: each and every one of them.
> > Am I blocked? Did I piss someone off? Im not blocked because of
> > 'excessive' use.
> >
>
> Quite possibly. I think they're getting stricter regarding their
> fair use policy. One of my servers was blocked while another wasn't
> even though the latter was just as high volume. I suspect the other
> server would have been blocked had I not opted for their paid service.
So, you have paid for their services? Per their agreement, you should
be able to distribute the zones across servers within your
organization. That is what we are doing. Our SpamHaus zones _ONLY_
resolve within our network (not to the outside world).
-------
_|_
(_| |
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
If you don't know what you are talking about, don't prove what an idiot you
are.
We have more than 100,000 users. We are a commercial service. They don't
post the prices. Read the post again.
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
RE: Pbl.spamhaus.org down?
Posted by Robert - elists <li...@abbacomm.net>.
> Can't find commercial pricing, but 'corporate' pricing is $168,000 per
> year
> for unlimited use. (100,000 per year is only $10,000 per year)
Michael
Corporate up to 100 users is $500 a year
http://www.spamhaus.org/datafeed/index.html
click on the service price check button
then select appropriate possibilities for you and yours
- rh
Re: Pbl.spamhaus.org down?
Posted by Michelle Konzack <li...@freenet.de>.
Am 2008-02-25 16:29:41, schrieb Matus UHLAR - fantomas:
> On 25.02.08 11:00, Sven Rudolph wrote:
> > Corporation(Business) is $16,800 per year, not $168,000.
>
> which is still too much for our compane for example :-S
If you have 100.000 Users/Customers, it is only
1400 US$/month or 0.014 US$/User/Month.
I have only 43.000 USER but the service is it worth.
"spamhaus" is a very good service and drop per day over
14.000.000 spams where most coming from the USA
Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
Re: Pbl.spamhaus.org down?
Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
> >> http://www.spamhaus.org/organization/dnsblusage.html
> >>
> >> says:
> >>
> >> 1. Your use of the Spamhaus DNSBLs is non-commercial*, /and/
> >> 2. Your email traffic is less than 80,000 SMTP connections per day, /and/
> >> 3. Your DNSBL query volume is less than 320,000 queries per day.
> Michael Scheidell <sc...@secnap.net> writes:
> > Can't find commercial pricing, but 'corporate' pricing is $168,000 per year
> > for unlimited use. (100,000 per year is only $10,000 per year)
On 25.02.08 11:00, Sven Rudolph wrote:
> Corporation(Business) is $16,800 per year, not $168,000.
which is still too much for our compane for example :-S
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
Re: Pbl.spamhaus.org down?
Posted by Sven Rudolph <Sv...@drewag.de>.
Michael Scheidell <sc...@secnap.net> writes:
>> http://www.spamhaus.org/organization/dnsblusage.html
>>
>> says:
>>
>> 1. Your use of the Spamhaus DNSBLs is non-commercial*, /and/
>> 2. Your email traffic is less than 80,000 SMTP connections per day, /and/
>> 3. Your DNSBL query volume is less than 320,000 queries per day.
>>
> Can't find commercial pricing, but 'corporate' pricing is $168,000 per year
> for unlimited use. (100,000 per year is only $10,000 per year)
Corporation(Business) is $16,800 per year, not $168,000.
Sven
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
> From: mouss <mo...@netoyen.net>
> Date: Sat, 23 Feb 2008 14:48:04 +0100
> Cc: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
> Subject: Re: Pbl.spamhaus.org down?
>
> Michael Scheidell wrote:
>>> From: Bob Amen <am...@oreilly.com>
>>> Organization: O'Reilly Media, Inc.
>>> Date: Fri, 22 Feb 2008 17:02:11 -0800
>>> To: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
>>> Subject: Re: Pbl.spamhaus.org down?
>>>
>
> http://www.spamhaus.org/organization/dnsblusage.html
>
> says:
>
> 1. Your use of the Spamhaus DNSBLs is non-commercial*, /and/
> 2. Your email traffic is less than 80,000 SMTP connections per day, /and/
> 3. Your DNSBL query volume is less than 320,000 queries per day.
>
Can't find commercial pricing, but 'corporate' pricing is $168,000 per year
for unlimited use. (100,000 per year is only $10,000 per year)
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Sat, 2008-02-23 at 08:58 -0500, Michael Scheidell wrote:
> > http://www.spamhaus.org/organization/dnsblusage.html
> Maybe a link from pbl/zen pages to that would have helped.
There is. Right there in the PBL main text. There are only two links,
the second one reads 'Spamhaus DNSBL usage criteria'.
> They why did they block my secondary server? (its not commercial, has less
> than 80K connections per day, less than 320K queries per day).
> Its just my secondary server, and ONLY service OUR domains, not clients.
Has this actually been confirmed to be a block?
guenther
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
> From: mouss <mo...@netoyen.net>
> Date: Sat, 23 Feb 2008 14:48:04 +0100
> Cc: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
> Subject: Re: Pbl.spamhaus.org down?
>
> Michael Scheidell wrote:
>>> From: Bob Amen <am...@oreilly.com>
>>> Organization: O'Reilly Media, Inc.
>>> Date: Fri, 22 Feb 2008 17:02:11 -0800
>>> To: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
>>> Subject: Re: Pbl.spamhaus.org down?
>> And just _HOW_ would one even know they HAD a paid service or what their
>> thresholds are?
>> Nothing on their web site, nothing on the pbl.spamhaus.org web site.
>>
>
> http://www.spamhaus.org/organization/dnsblusage.html
Maybe a link from pbl/zen pages to that would have helped.
>
> says:
>
> 1. Your use of the Spamhaus DNSBLs is non-commercial*, /and/
> 2. Your email traffic is less than 80,000 SMTP connections per day, /and/
> 3. Your DNSBL query volume is less than 320,000 queries per day.
>
They why did they block my secondary server? (its not commercial, has less
than 80K connections per day, less than 320K queries per day).
Its just my secondary server, and ONLY service OUR domains, not clients.
I just tried to fill out their form (which only asked a couple of questions)
and they now want me to email them.
I will email them to see.
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by mouss <mo...@netoyen.net>.
Michael Scheidell wrote:
>> From: Bob Amen <am...@oreilly.com>
>> Organization: O'Reilly Media, Inc.
>> Date: Fri, 22 Feb 2008 17:02:11 -0800
>> To: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
>> Subject: Re: Pbl.spamhaus.org down?
>>
>
>
>> Quite possibly. I think they're getting stricter regarding their
>> fair use policy. One of my servers was blocked while another wasn't even
>> though the latter was just as high volume. I suspect the other server
>> would have been blocked had I not opted for their paid service.
>>
>> I highly recommend their paid service anyway. It ends up working
>> much faster because all queries are local (rbldnsd). We should support
>> their work too and it's not very expensive.
>>
> And just _HOW_ would one even know they HAD a paid service or what their
> thresholds are?
> Nothing on their web site, nothing on the pbl.spamhaus.org web site.
>
http://www.spamhaus.org/organization/dnsblusage.html
says:
1. Your use of the Spamhaus DNSBLs is non-commercial*, /and/
2. Your email traffic is less than 80,000 SMTP connections per day, /and/
3. Your DNSBL query volume is less than 320,000 queries per day.
as a result of (1), if the queries come from services known to be
commercial, you may get blocked (there is a problem with Barracuda for
example).
Other "caveats" include:
- if you happen to be part of a network that is blocked, you may need to
ask for whitelisting.
- if your queries pass through a forwarder, the number of queries may
increase quickly...
- if your IPs are in a network that blocks spamhaus, it may be blocked:
http://www.spamhaus.org/faq/answers.lasso?section=DNSBL%20Usage#83
spam-l may be a better place to discuss this.
> I am paying for a commercial DCC service, so I understand about commercial
> use.
>
> (pardon the did at last weeks conversations) nothing saying this (use of
> spamhaus) is a 'introductory' free offer. SA removed (commented out) DCC
> plugin since it is a dual use (free for non-commercial use) paid
> subscription for commercial use. Why not warn people about the 'temporary'
> RBLS?
>
> And how would ANYONE using it EVER know they were blocked except that their
> email would start slowing down as pbl/zen... Etc starting taking 5 mins each
> to fail?
>
> Its not like each and every one of our ip addresses doesn't resolve, our
> whois record is correct, even include working phone numbers.
>
>
>
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
> From: Bob Amen <am...@oreilly.com>
> Organization: O'Reilly Media, Inc.
> Date: Fri, 22 Feb 2008 17:02:11 -0800
> To: "users@spamassassin.apache.org" <us...@spamassassin.apache.org>
> Subject: Re: Pbl.spamhaus.org down?
>
> Quite possibly. I think they're getting stricter regarding their
> fair use policy. One of my servers was blocked while another wasn't even
> though the latter was just as high volume. I suspect the other server
> would have been blocked had I not opted for their paid service.
>
> I highly recommend their paid service anyway. It ends up working
> much faster because all queries are local (rbldnsd). We should support
> their work too and it's not very expensive.
And just _HOW_ would one even know they HAD a paid service or what their
thresholds are?
Nothing on their web site, nothing on the pbl.spamhaus.org web site.
I am paying for a commercial DCC service, so I understand about commercial
use.
(pardon the did at last weeks conversations) nothing saying this (use of
spamhaus) is a 'introductory' free offer. SA removed (commented out) DCC
plugin since it is a dual use (free for non-commercial use) paid
subscription for commercial use. Why not warn people about the 'temporary'
RBLS?
And how would ANYONE using it EVER know they were blocked except that their
email would start slowing down as pbl/zen... Etc starting taking 5 mins each
to fail?
Its not like each and every one of our ip addresses doesn't resolve, our
whois record is correct, even include working phone numbers.
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by Bob Amen <am...@oreilly.com>.
Michael Scheidell wrote:
> >Works fine for me. Are you sure you weren't blocked?
>
>
> In fact, I found several sites (different networks, not mine) where it
> doesn't work.
> (I don't query more than 10,000 per day)
>
> The one that works best is the one that is doing 150K queries per day.
> Figure that.
>
> tried: each and every one of them.
> Am I blocked? Did I piss someone off? Im not blocked because of 'excessive'
> use.
>
Quite possibly. I think they're getting stricter regarding their
fair use policy. One of my servers was blocked while another wasn't even
though the latter was just as high volume. I suspect the other server
would have been blocked had I not opted for their paid service.
I highly recommend their paid service anyway. It ends up working
much faster because all queries are local (rbldnsd). We should support
their work too and it's not very expensive.
Bob
--
Bob Amen
O'Reilly Media, Inc.
http://www.ora.com/
http://www.oreilly.com/
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
--
Michael Scheidell, CTO
>|SECNAP Network Security
Winner 2008 Network Products Guide Hot Companies
FreeBsd SpamAssassin Ports maintainer
Charter member, ICSA labs anti-spam consortium
> Works fine for me. Are you sure you weren't blocked?
>
In fact, I found several sites (different networks, not mine) where it
doesn't work.
(I don't query more than 10,000 per day)
The one that works best is the one that is doing 150K queries per day.
Figure that.
tried: each and every one of them.
Am I blocked? Did I piss someone off? Im not blocked because of 'excessive'
use.
host -tns pbl.spamhaus.org
pbl.spamhaus.org name server b.ns.spamhaus.org.
pbl.spamhaus.org name server c.ns.spamhaus.org.
pbl.spamhaus.org name server d.ns.spamhaus.org.
pbl.spamhaus.org name server f.ns.spamhaus.org.
pbl.spamhaus.org name server g.ns.spamhaus.org.
pbl.spamhaus.org name server h.ns.spamhaus.org.
pbl.spamhaus.org name server i.ns.spamhaus.org.
pbl.spamhaus.org name server k.ns.spamhaus.org.
pbl.spamhaus.org name server l.ns.spamhaus.org.
pbl.spamhaus.org name server m.ns.spamhaus.org.
pbl.spamhaus.org name server o.ns.spamhaus.org.
pbl.spamhaus.org name server q.ns.spamhaus.org.
pbl.spamhaus.org name server r.ns.spamhaus.org.
pbl.spamhaus.org name server s.ns.spamhaus.org.
pbl.spamhaus.org name server t.ns.spamhaus.org.
pbl.spamhaus.org name server x.ns.spamhaus.org.
pbl.spamhaus.org name server y.ns.spamhaus.org.
pbl.spamhaus.org name server 1.ns.spamhaus.org.
pbl.spamhaus.org name server 8.ns.spamhaus.org.
pbl.spamhaus.org name server a.ns.spamhaus.org.
> Daryl
>
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
Michael Scheidell wrote:
> Been down long?
>
> 93.244.183.212.pbl.spamhaus.org
>
> server ns8.spamhaus.org
> Default server: ns8.spamhaus.org
> Address: 216.168.28.44#53
>> 93.244.183.212.pbl.spamhaus.org
> Server: ns8.spamhaus.org
> Address: 216.168.28.44#53
>
> Non-authoritative answer:
> *** Can't find 93.244.183.212.pbl.spamhaus.org: No answer
>
> If you find it works for you, restart your name server (flush cache) and try
> again.
Works fine for me. Are you sure you weren't blocked?
Daryl
Re: Pbl.spamhaus.org down?
Posted by Michael Scheidell <sc...@secnap.net>.
SM wrote:
> At 13:22 22-02-2008, Michael Scheidell wrote:
>> Been down long?
>>
>> 93.244.183.212.pbl.spamhaus.org
>>
>> server ns8.spamhaus.org
>
host 93.244.183.212.pbl.spamhaus.org 194.109.9.7
;; connection timed out; no servers could be reached
scanner# host 93.244.183.212.pbl.spamhaus.org 192.150.94.204
;; connection timed out; no servers could be reached
scanner# host 93.244.183.212.pbl.spamhaus.org b.ns.spamhaus.org
;; connection timed out; no servers could be reached
> Pbl.spamhaus.org works for me. I get an answer for that query. Note
> that spamhaus.org lists several name servers and I'm not hitting
> ns8.spamhaus.org. A query to ns8.spamhaus.org doesn't return an answer.
>
> Regards,
> -sm
--
Michael Scheidell, CTO
Main: 561-999-5000, Office: 561-939-7259
> *| *SECNAP Network Security Corporation
Winner 2008 Technosium hot company award.
www.technosium.com/hotcompanies/ <http://www.technosium.com/hotcompanies/>
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: Pbl.spamhaus.org down?
Posted by SM <sm...@resistor.net>.
At 13:22 22-02-2008, Michael Scheidell wrote:
>Been down long?
>
>93.244.183.212.pbl.spamhaus.org
>
>server ns8.spamhaus.org
Pbl.spamhaus.org works for me. I get an answer for that query. Note
that spamhaus.org lists several name servers and I'm not hitting
ns8.spamhaus.org. A query to ns8.spamhaus.org doesn't return an answer.
Regards,
-sm