Problems with sorbs and this list Fwd: Re: What blacklists are you using at your MTA?

[da...@chaosreigns.com]

Figured I'd forward this along, since he can't post to the list due
apparently to this list's use of sorbs.  The IP address I got it from was
67.210.225.171.  

Interestingly, sorbs' website says it's not actively listed, but their DNS
zone says otherwise.

And their website conveys a general state of brokenness.  And requires
too damn much personal information to be able to do anything.

(I did end up disabling sorbs and enabling psbl at my MTA.)

And I don't know anything about this guy or this IP other than what was
just emailed to me here.  Other than it has a DNSWL rank of "low", which
could easily mean we know nothing bad about it, but just haven't had
enough info to increase its rank.  And it has no DNSWL abuse reports.

----- Forwarded message from Jonathan Nichols <jn...@pbp.net> -----

Date: Sun, 3 Apr 2011 18:45:56 -0500
From: Jonathan Nichols <jn...@pbp.net>
To: Darxus@chaosreigns.com
Cc: users@spamassassin.apache.org
Subject: Re: What blacklists are you using at your MTA?
X-DNSWL: low pbp.net DNSWLId 23144


On Apr 2, 2011, at 8:24 PM, Darxus@chaosreigns.com wrote:

> I'm curious what blacklists other people are currently using at their MTA,
> rejecting during delivery, before mail gets to spamassassin.
> 
> For a while I've been using zen.spamhaus.org and dnsbl.sorbs.net.  Based on
> recent stats ( http://ruleqa.spamassassin.org/?daterev=20110319 )
> I think I'm dropping sorbs and adding psbl.surriel.com.


At the MTA? None at the moment, and I have no idea if this will reach you since SORBS still has my entire netblock incorrectly listed as "dynamic" and they absolutely refuse to communicate about it - or address the issue. 

The irony. I cannot write to the Spamassassin list because Apache.org is using SORBS - which is broken and is incorrectly flagging clean IPs still. Thus limiting my ability to communicate with peers and help address the spam problem I have going on.. one that SORBS sure hasn't helped. The IPs that are spamming me? Listed clean in SORBS.

:/

----- End forwarded message -----

-- 
"I love God. He's so deliciously evil." - Stewie Griffin, Family Guy 2x02
http://www.ChaosReigns.com

Re: Problems with sorbs and this list Fwd: Re: What blacklists are you using at your MTA?

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

On 03.04.11 21:56, darxus@chaosreigns.com wrote:
> If you go through the garbage required to register to get to the contents
> of this link, you'll see that this IP hits two listings, "Escalated"
> entries, and "DUHL" entries, both of which are colored green, which it says
> means "Historical Listings (inactive)".  But it's still listed:
> 
> $ host 171.225.210.67.dnsbl.sorbs.net
> 171.225.210.67.dnsbl.sorbs.net has address 127.0.0.10
> 
> ----- Forwarded message from Jonathan Nichols <jn...@pbp.net> -----
> > <us...@spamassassin.apache.org>: host mx1.eu.apache.org[192.87.106.230]
> > said:
> >    550 Dynamic IP Addresses See:
> >    http://www.sorbs.net/lookup.shtml?67.210.225.171 (in reply to RCPT TO
> >    command)
> ----- End forwarded message -----

oh... with 300 TTL we should better not trust you this is NOT dynamic IP.
It's one of things mentioned at SORBS page...

171.225.210.67.in-addr.arpa. 300 IN     PTR     heap.pbp.net.

;; AUTHORITY SECTION:
225.210.67.in-addr.arpa. 300    IN      NS      heap.pbp.net.

;; ADDITIONAL SECTION:
heap.pbp.net.           300     IN      A       67.210.225.171

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95

Re: Problems with sorbs and this list Fwd: Re: What blacklists are you using at your MTA?

[da...@chaosreigns.com]

If you go through the garbage required to register to get to the contents
of this link, you'll see that this IP hits two listings, "Escalated"
entries, and "DUHL" entries, both of which are colored green, which it says
means "Historical Listings (inactive)".  But it's still listed:

$ host 171.225.210.67.dnsbl.sorbs.net
171.225.210.67.dnsbl.sorbs.net has address 127.0.0.10

----- Forwarded message from Jonathan Nichols <jn...@pbp.net> -----
> <us...@spamassassin.apache.org>: host mx1.eu.apache.org[192.87.106.230]
> said:
>    550 Dynamic IP Addresses See:
>    http://www.sorbs.net/lookup.shtml?67.210.225.171 (in reply to RCPT TO
>    command)
----- End forwarded message -----

-- 
"...this thing we call 'failure' is not the falling down,
but the staying down." - Mary Pickford
http://www.ChaosReigns.com