[Tfug] blacklists

Anthony Steckman tfug@tfug.org
Thu Jan 16 01:44:01 2003


I remember an email exchange I had with Dave "the networking guy" over 
there. This was a little less than a year ago... Let's just say if I 
still had the thread and posted it here, you'd all get a few laughs.

Setting that aside, it's rarely ever fruitful to call an ISP (maybe even 
a smaller, local firm?) about blacklisting issues. Innocent customers, 
when they are effected, are bystanders catching stray bullets in the 
ongoing battle against SPAM.

Given the situation and the fact that I am relatively certain other 
UltraSW members are able to send email to the Listserv in question, I 
would suggest the following:

Have the UltraSW customer specify 66.181.240.7 as an outgoing mail 
server address in his or her email client (in place of mail.ultrasw.com 
in the field provided for smtp configuration).

66.281.66.81 may have been a decoy or an old relay. It doesn't even 
appear to be up as I write...

A possible forgery which leads to questions about whether or not 
up-to-date anti-virus scans have been performed, whether or not the 
individual has any kind of firewalling, whether or not there is a DNS 
resolution cache (hosts file, etc.) either on the system or on a system 
the computer routes requests through, etc.

Using the mail server IP should work as a quick fix.

As a side note, your message was sent through 66.181.240.4 -- either 
server address should work, for now.
 

+ I'm probably responding to some of what was said below:

. Date: Wed, 15 Jan 2003 23:58:35 -0700
. Subject: [Tfug] blacklists
. From: Paul Scott <waterhorse@ultrasw.com>
. Reply-To: tfug@tfug.org
. To: tfug@tfug.org
. User-Agent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.2.1)
.     Gecko/20021226 Debian/1.2.1-9
. 
. The following is the information that is given for bouncing of messages 
. sent from ultrasw.com subscribers to at least one listserve at 
. Yahoogroups.com:
. 
.  >> Remote host said: 550 This system is configured to reject mail from
.  >> 66.218.66.81 [66.218.66.81]
.  >> (Host blacklisted - Found on Realtime Black List server
.  >> 'relays.osirusoft.com')
. 
. I have a general idea what causes this but I am wondering what an ISP 
. should do about something like this.  I ask because many of you 
. understand this stuff and I'm not confident that ultrasw.com is going to 
. take the best action.
. 
. TIA,
. 
. Paul Scott
. 
. 
. 
. _______________________________________________
. tfug mailing list
. tfug@tfug.org
. http://www.tfug.org/mailman/listinfo/tfug
. 
.