OT: senderbase

[DAve <da...@pixelhammer.com>]

Good afternoon,

I take a look each week at senderbase to check and see what others think 
my network is sending out in terms of mail volume. I generally find it 
helpful.

http://senderbase.org

Anyone else using that report? I ask because I have two IPs showing up 
there as having excessively high mail volumes, yet the IPs they list 
have port 25 blocked at the client router.

I have send two emails to support@senderbase.org and received no replys 
so far. Am I spinning my wheels here?

DAve

Re: OT: senderbase

[DAve <da...@pixelhammer.com>]

Matt Kettler wrote:
> DAve wrote:
> 
>>Good afternoon,
>>
>>I take a look each week at senderbase to check and see what others think
>>my network is sending out in terms of mail volume. I generally find it
>>helpful.
>>
>>http://senderbase.org
>>
>>Anyone else using that report? I ask because I have two IPs showing up
>>there as having excessively high mail volumes, yet the IPs they list
>>have port 25 blocked at the client router.
> 
> 
> Are you sure? And bear in mind, you need to be considering outbound access, not
> inbound.

Yes, we blocked them at their Cisco because they had been compromised 
(Motel with free internet access). Blocked in and out and forced the sue 
fo webmail and smtp-auth.


DAve

> 
> ie:
> <your ip>:<anyport> to <anyip>:25
> 
> not:
> 
> <anyip>:<anyport> to <your ip>:25
> 
> You might try logging into a box with one of those IPs and trying to telnet to
> an outside mailserver. (you can use xanadu.evi-inc.com for this if you wish, but
> do be nice and merely issue a quit command if you connect.)
> 
> telnet xanadu.evi-inc.com 25
> 220 xanadu.evi-inc.com ESMTP Unsolicited Commercial Email prohibited
> quit
> 221 2.0.0 xanadu.evi-inc.com closing connection
> Connection closed by foreign host.
> 
> 
>>I have send two emails to support@senderbase.org and received no replys
>>so far. Am I spinning my wheels here?
>>
> 
> 
> 
> 
> 

Re: OT: senderbase

[Matt Kettler <mk...@evi-inc.com>]

DAve wrote:
> Good afternoon,
> 
> I take a look each week at senderbase to check and see what others think
> my network is sending out in terms of mail volume. I generally find it
> helpful.
> 
> http://senderbase.org
> 
> Anyone else using that report? I ask because I have two IPs showing up
> there as having excessively high mail volumes, yet the IPs they list
> have port 25 blocked at the client router.

Are you sure? And bear in mind, you need to be considering outbound access, not
inbound.

ie:
<your ip>:<anyport> to <anyip>:25

not:

<anyip>:<anyport> to <your ip>:25

You might try logging into a box with one of those IPs and trying to telnet to
an outside mailserver. (you can use xanadu.evi-inc.com for this if you wish, but
do be nice and merely issue a quit command if you connect.)

telnet xanadu.evi-inc.com 25
220 xanadu.evi-inc.com ESMTP Unsolicited Commercial Email prohibited
quit
221 2.0.0 xanadu.evi-inc.com closing connection
Connection closed by foreign host.

> 
> I have send two emails to support@senderbase.org and received no replys
> so far. Am I spinning my wheels here?
>