FYI: NANOG Mailing List IPV4 hosts are in Spamhaus RBL
This from one of the mail servers I manage: H=lists.nanog.org [50.31.151.68] F=<nanog-bounces@lists.nanog.org> rejected RCPT <[x](mailto:nanog2@adns.net)xxxx@yyyyy.com>: host is listed in sbl.spamhaus.org Not sure anyone cares - mail still comes in via the IPv6 interface, but interesting that the listserv tries IPV4 1st.
On Mon, 11 Aug 2025 02:25:35 +0000, Lucien Hoydic via NANOG <nanog@lists.nanog.org> wrote:
This from one of the mail servers I manage:
H=lists.nanog.org [50.31.151.68] F=<nanog-bounces@lists.nanog.org> rejected RCPT <[x](mailto:nanog2@adns.net)xxxx@yyyyy.com>: host is listed in sbl.spamhaus.org
Not sure anyone cares - mail still comes in via the IPv6 interface, but interesting that the listserv tries IPV4 1st.
Actually, according to records in the logs, 50.31.151.68 has been flapping in and out of the SBL every few hours since 8 Aug, around 1600 UTC. Currently, it is not listed. mdr
On 8/10/25 10:25 PM, Lucien Hoydic via NANOG wrote:
This from one of the mail servers I manage:
H=lists.nanog.org [50.31.151.68] F=<nanog-bounces@lists.nanog.org> rejected RCPT <[x](mailto:nanog2@adns.net)xxxx@yyyyy.com>: host is listed in sbl.spamhaus.org
Not sure anyone cares - mail still comes in via the IPv6 interface, but interesting that the listserv tries IPV4 1st.
This is being looked at. Unsure why (and they don't give much info), but lists.nanog.org is only used for the list, and doesn't relay non-list emails. Please ensure you send an email for stuff like this to the admins@nanog.org or the List-owner nanog-owner@lists.nanog.org. Not all the admins are glued to the list. I filter into a different folder, and read it as I have time. I have been following a DNS server thread so why I saw this on a Sunday night. Thanks, -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net
On Sun, 10 Aug 2025 23:44:50 -0400, Bryan Fields via NANOG <nanog@lists.nanog.org> wrote:
This is being looked at. Unsure why (and they don't give much info), but lists.nanog.org is only used for the list, and doesn't relay non-list emails.
I work in the email deliverability field (for honest senders); the SBL's primary design intent was catching "snowshoe" operations, that spread the spamload over multiple IP ranges and/or domains. None of that behavior can be associated with this IP; however, we have some (rare) occasions when one of our clients, sending confirmed opt-in email from a single domain and netblock winds up listed. Normally Spamhaus is quite responsive in resolving these issues.
Please ensure you send an email for stuff like this to the admins@nanog.org or the List-owner nanog-owner@lists.nanog.org.
I've noted this advice, thanks. mdr -- "There are no laws here, only agreements." -- Masahiko (Idoru)
On 8/11/25 12:02 AM, Michael Rathbun via NANOG wrote:
On Sun, 10 Aug 2025 23:44:50 -0400, Bryan Fields via NANOG <nanog@lists.nanog.org> wrote:
This is being looked at. Unsure why (and they don't give much info), but lists.nanog.org is only used for the list, and doesn't relay non-list emails.
I work in the email deliverability field (for honest senders); the SBL's primary design intent was catching "snowshoe" operations, that spread the spamload over multiple IP ranges and/or domains. None of that behavior can be associated with this IP; however, we have some (rare) occasions when one of our clients, sending confirmed opt-in email from a single domain and netblock winds up listed. Normally Spamhaus is quite responsive in resolving these issues.
It was showing on the CSS Blocklist, not that it makes much difference. As of this morning, it's been removed and the queue is processing down. What I see lots of (and is infuriating) is people will click "report spam" in their MUA rather than unsubscribe. Perhaps I assume to much for members on a technical list to know how to unsubscribe from a list by reading the RFC-2919 headers. I've found RBLmon to be a useful tool, but I don't think it's been updated in about 15 years and doesn't support IPv6. BTW postmaster@lists.nanog.org and admins@nanog.org are real accounts that have real people looking at them. I guess it's kinda retro in that regard :-D Thanks, -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net
It appears that Bryan Fields via NANOG <nanog@lists.nanog.org> said:
It was showing on the CSS Blocklist, not that it makes much difference.
Actually it does. CSS is an automated system that uses a variety of clues to manage listings. Some of the clues are quite obscure, e.g. URLs with domains that use the same name servers as phish URLS (and yes, they know there are providers with millions of names on the same servers, they're not stupid.) I'm surprised though, the error rate is quite low and it's been a while since I've seen a false positive like this. R's, John
participants (4)
-
Bryan Fields -
John Levine -
Lucien Hoydic -
Michael Rathbun