Verizon mail server on MAPS RSS list
We've got customers trying to receive email from people using Verizon for Internet acess, and we are rejecting that mail because out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list. Can't pull up the MAPS RSS website at the moment to check why. Anyone know contact info for Verizon for this kind of issue? Thanks. Josh -- Josh Gentry (Call me Gentry.) help@swcp.com * jgentry@swcp.com * 505-232-7992
On Thu, 27 Mar 2003 13:40:00 -0700 Josh Gentry <jgentry@swcp.com> wrote:
We've got customers trying to receive email from people using Verizon for Internet acess, and we are rejecting that mail because out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list. Can't pull up the MAPS RSS website at the moment to check why. Anyone know contact info for Verizon for this kind of issue?
maps RSS is open relays. try the abuse.net relay tester on the BL'd IP and see what it turns up, http://www.abuse.net/relay.html richard -- Richard Welty rwelty@averillpark.net Averill Park Networking 518-573-7592 Unix, Linux, IP Network Engineering, Security
At 03:59 PM 3/27/2003 -0500, Richard Welty wrote:
On Thu, 27 Mar 2003 13:40:00 -0700 Josh Gentry <jgentry@swcp.com> wrote:
We've got customers trying to receive email from people using Verizon for Internet acess, and we are rejecting that mail because out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list. Can't pull up the MAPS RSS website at the moment to check why. Anyone know contact info for Verizon for this kind of issue?
maps RSS is open relays.
try the abuse.net relay tester on the BL'd IP and see what it turns up,
Looks like that IP is on quite a few lists actually... http://rbls.org/?q=206.46.170.44 Must be a very abused Verizon mail server, possibly one of many... Vinny Abello Network Engineer Server Management vinny@tellurian.com (973)300-9211 x 125 (973)940-6125 (Direct) PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0 E935 5325 FBCB 0100 977A Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com (888)TELLURIAN There are 10 kinds of people in the world. Those who understand binary and those that don't.
On Thu, 27 Mar 2003, Josh Gentry wrote:
We've got customers trying to receive email from people using Verizon for Internet acess, and we are rejecting that mail because out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list. Can't pull up the MAPS RSS website at the moment to check why. Anyone know contact info for Verizon for this kind of issue?
MAPS RSS is a list of open relays, no? It's a pretty good guess that the above mentioned server is therefore an open relay...and it's a correct one in this case. http://www.njabl.org/cgi-bin/lookup.cgi?query=206.46.170.44 http://openrbl.org/ip/206/46/170/44.htm If you're going to use a dnsbl, anybody's dnsbl, figure out how to whitelist first (or real soon after), because this sort of thing will happen from time to time. ---------------------------------------------------------------------- Jon Lewis *jlewis@lewis.org*| I route System Administrator | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
jlewis@lewis.org wrote:
If you're going to use a dnsbl, anybody's dnsbl, figure out how to whitelist first (or real soon after), because this sort of thing will happen from time to time.
Or learn how to tell people that spam is evil and under no circumstances will you accept spam from a system that sends it out in mass volume. If an AS became insecure and could start allowing anyone to setup new netbock advertisements from it, you would filter out the AS. If it was small, you might hardcode in the valid netblocks, but when it's a large AS, you tend just to shut it all down. Such is the way with smtp. -- -Jack
On Thu, 27 Mar 2003, Josh Gentry wrote:
We've got customers trying to receive email from people using Verizon for Internet acess, and we are rejecting that mail because out013pub.verizon.net [206.46.170.44] is on the MAPS RSS list. Can't pull up the MAPS RSS website at the moment to check why. Anyone know contact info for Verizon for this kind of issue?
This server is an open relay. It's been on RSS since Sept. It's also on njabl.org, and their web site is responding more quickly. Verizon has been contacted many times about this and either doesn't care or just doesn't know how to fix it. In fact, the MAPS page has a specific message that they must be contacted by a Verizon rep to have it removed. It will relay for anyone who gives a @verizon.net return address. ========================================================== Chris Candreva -- chris@westnet.com -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/
participants (6)
-
Christopher X. Candreva -
Jack Bates -
jlewis＠lewis.org -
Josh Gentry -
Richard Welty -
Vinny Abello