Problems with a black hole list in the netherlands
Hello, we are currently having a problem with a vigilante block list in the netherlands... I figure this is as good a forum as any....
The boilerplate: Please see <http://selwerd.cx/xbl/>, xbl is a *local* list, it would cost us time to check whether we can whitelist your IP.
Upon contacting this individual we get:
I listed the netblock(s) of your ISP because we get spam and autoreplies from it and sometimes, if at all, mail that is readworthy.
Of course, he can't produce -any- spam, or autoreply's, from our range.. or much of anything, really. Probably hit by a NIMBDA worm, or something. But, he has one of those "Unix Admin from H-ll" attitude's. Unprofessional, and Vigilante. How would one approach -this- ? I would ignore the fool, but his list is mentioned at Relays.OsiruSoft.com.... and some consider them as a valid source of data.... * sigh * Idea's ?
On Sat, 09 Mar 2002 07:04:36 -0500, Richard Irving <rirving@onecall.net> wrote:
Hello, we are currently having a problem with a vigilante block list in the netherlands... I figure this is as good a forum as any....
The boilerplate: Please see <http://selwerd.cx/xbl/>, xbl is a *local* list, it would cost us time to check whether we can whitelist your IP. [...] How would one approach -this- ?
I would start by reading the web page in the URL you quoted. You might find it illuminating. -- W . | ,. w , "Some people are alive only because \|/ \|/ it is illegal to kill them." Perna condita delenda est ---^----^---------------------------------------------------------------
Actually, I did... I doesn't seem too on the level. With lines like:
Even we don't block, we just send a 471 reply and let the monkeys determine whether the e-mail looks legitimate or spammy.
However, after explaining all this about 127.0.0.2, there is a little note on the bottom:
What does 127.0.0.4 mean?
Not much, it's the only code we return, "not whitelisted" is perhaps the most accurate description.
Guess the number returned for us ? Ironic, at least. Were it not referenced by http://Relays.OsiruSoft.com./, Frankly, I would care less. * Hint * Hint * Lionel wrote:
On Sat, 09 Mar 2002 07:04:36 -0500, Richard Irving <rirving@onecall.net> wrote:
Hello, we are currently having a problem with a vigilante block list in the netherlands... I figure this is as good a forum as any....
The boilerplate: Please see <http://selwerd.cx/xbl/>, xbl is a *local* list, it would cost us time to check whether we can whitelist your IP. [...] How would one approach -this- ?
I would start by reading the web page in the URL you quoted. You might find it illuminating.
-- W . | ,. w , "Some people are alive only because \|/ \|/ it is illegal to kill them." Perna condita delenda est ---^----^---------------------------------------------------------------
Were it not referenced by http://Relays.OsiruSoft.com./,
It's his own personal block list - it's not meant for use by other ISP's. Ignore it - unless you really need to send them mail. I don't know of any other ISP's actually using it as a block list. Mark Radabaugh Amplex (419) 833-3635
Unfortunately, we received complaints -downstream-. If the gentleman involved had been even a little cooperative, we would even help remove a valid offender. Rock -> US <-Hard Place I need my morning coffee. TIA. Mark Radabaugh wrote:
Were it not referenced by http://Relays.OsiruSoft.com./,
It's his own personal block list - it's not meant for use by other ISP's. Ignore it - unless you really need to send them mail. I don't know of any other ISP's actually using it as a block list.
Mark Radabaugh Amplex (419) 833-3635
On Sat, 09 Mar 2002 08:25:10 -0500, Richard Irving <rirving@onecall.net> wrote:
Actually, I did... I doesn't seem too on the level.
<shrugs> It seems pretty typical of the pages that most black-list maintainers have, albeit with slightly fractured English. (Which is not to insult him - his English is dramatically better than my nonexistant Dutch. ;)
With lines like:
Even we don't block, we just send a 471 reply and let the monkeys determine whether the e-mail looks legitimate or spammy.
However, after explaining all this about 127.0.0.2, there is a little note on the bottom:
What does 127.0.0.4 mean?
Not much, it's the only code we return, "not whitelisted" is perhaps the most accurate description.
Guess the number returned for us ?
Well, if he doesn't want to accept mail from your business, that's his right & there's not a lot you can do about it. If it's one of your customers complaining they can't send mail there, you should probably explain to them that it's the target domain's policy that's bouncing their email, then point them directly at him & stop worrying about it.
Ironic, at least.
Were it not referenced by http://Relays.OsiruSoft.com./, Frankly, I would care less.
* Hint * Hint *
The guy's black list is a private list for his domain. He explicitly states that you have to be white-listed to get mail through to there. He also states explicitly that no other lists are picking up his black-list, so you're really complaining about a non-issue. This bit of the page seems pretty clear to me: " Also note that while http://relays.osirusoft.com/ cgi-bin/rbcheck.cgi does also check our blocklist, the data from our blocklist are not incoporated into their blocklist." -- W . | ,. w , "Some people are alive only because \|/ \|/ it is illegal to kill them." Perna condita delenda est ---^----^---------------------------------------------------------------
On Sat, Mar 09, 2002 at 07:04:36AM -0500, Richard Irving wrote:
Hello, we are currently having a problem with a vigilante block list in the netherlands... I figure this is as good a forum as any....
I suspect these: http://www.spamcon.org/directories/discussions.shtml would be better forums to take this to.
The boilerplate: Please see <http://selwerd.cx/xbl/>, xbl is a *local* list, it would cost us time to check whether we can whitelist your IP. [snip] I would ignore the fool, but his list is mentioned at Relays.OsiruSoft.com.... and some consider them as a valid source of data....
* sigh *
Idea's ?
Perhaps you could contact those that "consider them as a valid source of data" and see if you can convince them to put in an exception for your mailserver. This should not be difficult if they want your mail. -- Bob <melange@yip.org> | It's pretty good, if you don't think about it.
On Sat, 9 Mar 2002 09:05:33 -0500, Bob K <melange@yip.org> wrote:
http://www.spamcon.org/directories/discussions.shtml would be better forums to take this to.
Yes, good point. I'll stop discussing this now. -- W . | ,. w , "Some people are alive only because \|/ \|/ it is illegal to kill them." Perna condita delenda est ---^----^---------------------------------------------------------------
On Sat, Mar 09, 2002 at 07:04:36AM -0500, Richard Irving wrote:
Hello, we are currently having a problem with a vigilante block list in the netherlands... I figure this is as good a forum as any....
Its not "as good a forum as any". Try something related to spam like spam-l or nanae.
Of course, he can't produce -any- spam, or autoreply's, from our range.. or much of anything, really. Probably hit
http://groups.google.com/groups?as_q=onecall.net&as_ugroup=news.admin.net-abuse.sightings&as_scoring=d&hl=en -- John Payne http://sackheads.org/jpayne/ john@sackheads.org http://sackheads.org/uce/ Fax: +44 870 0547954 To send me mail, use the address in the From: header
participants (5)
-
Bob K -
John Payne -
Lionel -
Mark Radabaugh -
Richard Irving