Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it. Thanks
On 10/15/2015 00:27, Jason Baugher wrote:
Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it.
I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database. You look-up you IP, they tell you what the problem is, you fix it, and the block goes away. It always used to work. Every time. -- sed quis custodiet ipsos custodes? (Juvenal)
When all it says is, "spam-sending trojan, malicious link, or some type of botnet", it's not a lot to go on. I've seen examples where their lookup tool provides more details, but in this case, the response is generic. In fact, usually when this happens to a customer, they're able to figure out the problem without a lot of fuss and keep it from happening again. Sometimes we have to help them, but it's always something fairly obvious. It's only in this one case that we're struggling to identify the cause. Thank you to those that pointed out their email address on the FAQ page. How I managed to read through there and miss it, I'll never know. On Thu, Oct 15, 2015 at 12:32 PM, Larry Sheldon <larrysheldon@cox.net> wrote:
On 10/15/2015 00:27, Jason Baugher wrote:
Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it.
I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database.
You look-up you IP, they tell you what the problem is, you fix it, and the block goes away.
It always used to work. Every time.
-- sed quis custodiet ipsos custodes? (Juvenal)
On 10/15/2015 12:32, Larry Sheldon wrote:
On 10/15/2015 00:27, Jason Baugher wrote:
Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it.
I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database.
You look-up your IP, they tell you what the problem is, you fix it, and the block goes away.
It always used to work. Every time.
WAIT A MINUTE! "CBL" is not "Spamhaus", is it?! http://www.abuseat.org/ -- sed quis custodiet ipsos custodes? (Juvenal)
On 10/15/2015 13:27, Larry Sheldon wrote:
On 10/15/2015 12:32, Larry Sheldon wrote:
On 10/15/2015 00:27, Jason Baugher wrote:
Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it.
I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database.
You look-up your IP, they tell you what the problem is, you fix it, and the block goes away.
It always used to work. Every time.
WAIT A MINUTE! "CBL" is not "Spamhaus", is it?!
MY BAD! Yes, it is "spamhaus". Sorry. -- sed quis custodiet ipsos custodes? (Juvenal)
I felt I should mention, Spamhaus was quick to respond to my email and gave me excellent information on what was triggering the blacklisting. On Thu, Oct 15, 2015 at 1:29 PM, Larry Sheldon <larrysheldon@cox.net> wrote:
On 10/15/2015 13:27, Larry Sheldon wrote:
On 10/15/2015 12:32, Larry Sheldon wrote:
On 10/15/2015 00:27, Jason Baugher wrote:
Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it.
I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database.
You look-up your IP, they tell you what the problem is, you fix it, and the block goes away.
It always used to work. Every time.
WAIT A MINUTE! "CBL" is not "Spamhaus", is it?!
MY BAD! Yes, it is "spamhaus".
Sorry.
-- sed quis custodiet ipsos custodes? (Juvenal)
WAIT A MINUTE! "CBL" is not "Spamhaus", is it?!
Yes, it is. Informally it was for a very long time via the Spamhaus XBL. Now it's explicit. There's not much practical difference, and the same people are running it. R's, John
participants (4)
-
Eliezer Croitoru -
Jason Baugher -
John Levine -
Larry Sheldon