mwalling wrote:
Some blacklists are ok though, like Spamhaus' PBL... that list stops a lot of malware infested Windows boxes from getting spam through.
The problem is not some hundret hacked boxes, the problem is that your UPLINK GNAX is hosting a major spammer with some hundret IP's at this time.
Have a look at the IP's which are causing the problem and see what you get as PTR's:
http://www.uceprotect.net/en/rblcheck.php?asn=3595
Scroll down complete to see the IP's which got listed at Level 1 and so causing the problem.
So lets see some of the IP's and decide what it is:
63.247.64.65 mail1.awesomemktg.net
63.247.64.66 mail2.awesomemktg.net
and so on some hundrets more of that one..
Now lets look to whom you can say THANK YOU for being listed:
Domain Name: awesomemktg.net
Registrar: Name.com LLC
Expiration Date: 2009-04-28 00:00:00
Creation Date: 2008-04-28 16:06:07
Name Servers:
ns1.awesomemktg.net
ns2.awesomemktg.net
REGISTRANT CONTACT INFO
Inet Advertising
Domain Administrator
234 Morrell Rd.
Suite 160
Knoxville
TN
37919
US
Phone: +1.6155126750
Email Address:
inetadvertising.admin@gmail.com
63.247.64.100
and let's see who is that:
Domain Name: differentmktg.net
Registrar: Name.com LLC
Expiration Date: 2009-04-28 00:00:00
Creation Date: 2008-04-28 16:06:08
Name Servers:
ns1.differentmktg.net
ns2.differentmktg.net
REGISTRANT CONTACT INFO
Inet Advertising
Domain Administrator
234 Morrell Rd.
Suite 160
Knoxville
TN
37919
US
Phone: +1.6155126750
Email Address:
inetadvertising.admin@gmail.com
Lets pick another IP from that space ...
63.247.95.100 mail4.mailingsforconsumers.net
Domain Name: mailingsforconsumers.net
Registrar: Name.com LLC
Expiration Date: 2009-04-13 00:00:00
Creation Date: 2008-04-13 16:33:56
Name Servers:
ns2.mailingsforconsumers.net
ns1.mailingsforconsumers.net
REGISTRANT CONTACT INFO
Inet Advertising
Domain Administrator
234 Morrell Rd.
Suite 160
Knoxville
TN
37919
US
Phone: +1.6155126750
Email Address:
inetadvertising.admin@gmail.com
If you will do the work and have a look to that list above then you will find that GNAX did lease some hundret IP's to a well known spammer.
Claiming they would not have known about that is futile.
The PTR's given should have been warning enough to know that it will be no brave customer.
All of the domains within the complete Listings were registered less than 3 month ago and for only one reason - spamming.
Spammers lie and so does GNAX.
GNAX wants YOUR money, but they also want spammers money.
They did exactly knew that they will end up in UCEPROTECT-Level 3 again if they will give complete /24 Networks to spammers again as they did it one year ago too.
It might be a good idea if Linode would search for a better uplink instead.
Companies using our lists do exactly know why they are using UCEPROTECT and you will not get them to drop us, because UCEPROTECT works for them.
Have a look at AL IVERSON's independant staistics:
http://stats.dnsbl.com/uce3.html
That translates to: UCEPROTECT-Level 3 (which lists complete providers) has blocked about 40% spammails, but less than 0.3% false positives
Could that mean that those some hundret providers which manage to end up in Level 3 are responsible for 40% of the global spam, but less than 0,3% real mail came from their networks and ranges?