Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: spam blocklist
PostPosted: Tue Sep 16, 2003 6:25 pm 
Offline
Senior Newbie

Joined: Tue Sep 16, 2003 6:19 pm
Posts: 6
Website: http://mlcastle.net/
AOL: M+L+Castle
Location: New York, NY, US
I noticed that the Linode IP range is now being blocked by proxies.relays.monkeys.com and some other DNSBLs... what gives?


Top
   
 Post subject:
PostPosted: Tue Sep 16, 2003 6:57 pm 
Offline
Linode Staff
User avatar

Joined: Tue Apr 15, 2003 6:24 pm
Posts: 3090
Website: http://www.linode.com/
Location: Galloway, NJ
I just poked around a few lists and didn't come up with much. Can you either post here, or email me (service@linode.com) some of the IPs you found and in which blacklists?

-Chris


Top
   
 Post subject:
PostPosted: Tue Sep 16, 2003 7:20 pm 
Offline
Senior Newbie

Joined: Tue Sep 16, 2003 6:19 pm
Posts: 6
Website: http://mlcastle.net/
AOL: M+L+Castle
Location: New York, NY, US
mlc@pinetree:~$ dnstxt 76.53.5.64.proxies.relays.monkeys.com
BLOCKED: See http://www.monkeys.com/phl/listed.html
mlc@pinetree:~$ dnstxt 6.53.5.64.proxies.relays.monkeys.com
BLOCKED: See http://www.monkeys.com/phl/listed.html


Top
   
 Post subject:
PostPosted: Tue Sep 16, 2003 8:09 pm 
Offline
Linode Staff
User avatar

Joined: Tue Apr 15, 2003 6:24 pm
Posts: 3090
Website: http://www.linode.com/
Location: Galloway, NJ
Monkey.com's "Proxy Hijackers List" contains what looks to me like all of ThePlanet's IP ranges (or at least a VERY sizeable chunk):

Code:
12.96.160.0/21 theplanet.com
12.156.0.0/21 theplanet.com
64.5.32.0/20 theplanet.com
64.5.48.0/20 theplanet.com
64.46.160.0/19 theplanet.com
65.247.184.0/21 theplanet.com
66.28.25.0/24 theplanet.com
66.28.26.0/24 theplanet.com
66.28.110.0/24 theplanet.com
66.28.111.0/24 theplanet.com
66.28.113.0/24 theplanet.com
66.250.65.0/24 theplanet.com
69.41.224.0/20 theplanet.com
69.56.128.0/18 theplanet.com
209.223.234.0/23 theplanet.com
216.88.118.0/23 theplanet.com
216.185.96.0/19 theplanet.com
216.234.224.0/19 theplanet.com


This must be a mistake! I've contacted ThePlanet regarding this and we'll work it out...

-Chris


Top
   
 Post subject:
PostPosted: Thu Oct 02, 2003 9:43 pm 
Offline
Newbie

Joined: Thu Oct 02, 2003 8:42 pm
Posts: 4
caker wrote:
This must be a mistake! I've contacted ThePlanet regarding this and we'll work it out...
-Chris


Since my email server is being rejected by SBC and NEXTEL I just wanted to ask what is the status on this "spam situation?

Mariusz


Top
   
 Post subject:
PostPosted: Thu Oct 02, 2003 9:56 pm 
Offline
Newbie

Joined: Thu Oct 02, 2003 8:42 pm
Posts: 4
mlc wrote:
mlc@pinetree:~$ dnstxt 76.53.5.64.proxies.relays.monkeys.com
BLOCKED: See http://www.monkeys.com/phl/listed.html
mlc@pinetree:~$ dnstxt 6.53.5.64.proxies.relays.monkeys.com
BLOCKED: See http://www.monkeys.com/phl/listed.html


You can also try http://www.spews.org .

Mariusz


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2003 12:26 am 
Offline
Senior Member

Joined: Wed Aug 13, 2003 10:24 am
Posts: 55
poganin wrote:
Since my email server is being rejected by SBC and NEXTEL I just wanted to ask what is the status on this "spam situation?


I believe monkeys.com is no longer an active blocklist, having been shut down by massive DOS attacks. See http://yro.slashdot.org/article.pl?sid= ... 126&tid=95

I had an email connectivity problem that I thought was due to a blocklist but turned out (via a suggestion from Chris) to be the ECN issue. See http://www.linode.com/forums/viewtopic.php?p=371

Roy


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2003 7:25 am 
Offline
Newbie

Joined: Thu Oct 02, 2003 8:42 pm
Posts: 4
rhashimoto wrote:
poganin wrote:
I had an email connectivity problem that I thought was due to a blocklist but turned out (via a suggestion from Chris) to be the ECN issue. See http://www.linode.com/forums/viewtopic.php?p=371
Roy


Thanks!
This solved problem with Nextel but still SBC is rejecting my emails with "553 5.3.0 DNSBL:to request removal, please send an E-mail to abuse@prodigy.net".

telnet mta1.snet.net 25

Trying 204.60.203.70...
Connected to mta1.snet.net.
Escape character is '^]'.
220 mta1.snet.net ESMTP Sendmail 8.12.9/8.12.9; Fri, 3 Oct 2003 07:19:45 -0400 (EDT)
ehlo me
553 5.3.0 DNSBL:to request removal,please send an E-mail to abuse@prodigy.net


Of course abuse@prodigy.net is not responding to my emails ;-(

Mariusz


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2003 2:23 pm 
Offline
Senior Member

Joined: Wed Aug 13, 2003 10:24 am
Posts: 55
poganin wrote:
telnet mta1.snet.net 25


My linode IP isn't blocked by this server. Try checking if the reverse DNS on your IP is correct - mail servers can be set to reject hosts without valid reverse DNS. I just tried the reversing one of the IPs mentioned earlier in this thread, 64.5.53.6, which reversed to host1.lindoe.com [sic]. This can be enough to be refused by a server with a lot of security activated.


Top
   
 Post subject:
PostPosted: Fri Oct 03, 2003 3:42 pm 
Offline
Linode Staff
User avatar

Joined: Tue Apr 15, 2003 6:24 pm
Posts: 3090
Website: http://www.linode.com/
Location: Galloway, NJ
I just fixed the typo for the reverse of 64.5.53.6/host1.linode.com (thanks, btw) -- linode traffic shouldn't be going through 64.5.53.6 regardless, so I'm not sure that specific typo would have caused trouble... But, mail servers will reject mail giving one reason, even though the real reason might have been unrelated.

-Chris


Top
   
 Post subject:
PostPosted: Wed Jan 07, 2004 5:58 am 
Offline
Senior Member

Joined: Wed Jan 07, 2004 5:54 am
Posts: 71
Hi there.

What's the status of the SPEWS situation?

http://spews.org/html/S2857.html

Any news?


Top
   
PostPosted: Mon Feb 02, 2004 12:49 pm 
Offline
Newbie

Joined: Sat Dec 20, 2003 10:14 am
Posts: 3
Any luck with this situation?

http://www.spews.org/html/S2100.html


Top
   
 Post subject:
PostPosted: Mon Feb 02, 2004 2:30 pm 
Offline
Linode Staff
User avatar

Joined: Tue Apr 15, 2003 6:24 pm
Posts: 3090
Website: http://www.linode.com/
Location: Galloway, NJ
I've made noise with both ThePlanet and Hurricane Electric regarding their spews status. I don't know what they've done about either situation.

In my experience with both providers, they aren't tolerant to spammers at all. In fact, I've seen both companies be extremely responsive to abuse notices.

I'm not sure what more I can do about either situation (suggestions?). I know most sensible ISPs don't use SPEWS, because they pull stuff like this (adding a providers entire IP blocks), and tend to block more legitimate email than spam.

I'm open to suggestions.

-Chris


Top
   
 Post subject: Thanks...
PostPosted: Mon Feb 02, 2004 2:38 pm 
Offline
Newbie

Joined: Sat Dec 20, 2003 10:14 am
Posts: 3
Chris,

Thanks for looking into this and raising the issue with the providers. I appreciate your activity on our behalf. It's just frusterating, that's all.

I haven't been notified by too many people that my mail has been blocked, so I'm not totally affected by it right now, it was just interesting (and a little unnerving) seeing my IP show up there.

Thanks for all that you do to take care of us here! ;-) It's an awesome place to "live".

-Chris


Top
   
 Post subject:
PostPosted: Sun Feb 15, 2004 6:02 pm 
Offline
Senior Newbie

Joined: Wed Jan 28, 2004 10:06 pm
Posts: 11
http://openrbl.org/#66.220.1.180

Any word from HE on the RBL issue? I know SPEWS is crap (as is BLARS, by the looks of it), but some people use it.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group