Re: Blocklisting? Ho hum in http://www.dslreports.com/forum/r10075453 en Wed, 25 Nov 2009 07:27:44 EDT Wed, 25 Nov 2009 07:27:44 EDT Re: Blocklisting? Ho hum http://www.dslreports.com/forum/remark,10104282 add14pw : If he's sending directly from his computer (not via the Optimum Online SMTP server) much of his email is going to be blocked by me, AOL and many other places. Mail direct from dynamic addresses is routinely blocked these days because of spam from machines which are compromised by security problems.

Also, if a spamming attack does get a machine on the OO network, that machine's IP address is rapidly added to the spam source blacklists and gets blocked by lots of other people. That sort of blacklist will often be used to block the email if it was from the IP address at any point, even if it was sent via the legitimate SMTP server ultimately.

Some blacklists are also not very well handled and may block the whole domain instead of just the compromised machines. These are probably mostly the places which haven't yet discovered that blocking mail coming directly from dynamic addresses is less disruptive. This is particularly problematic when some exploits and spam uses bogus from addresses.

Spamming software can also use the legitimate SMTP server of OO once it gets on the machine, so that can end up with the legitimate OO outgoing SMTP server blocked for a while (hopefully only for a while).

The best he can do is send via the OO SMTP server instead of directly (if he's sending directly) and suffer when OO takes too long to catch abuse of that SMTP server.]]> http://www.dslreports.com/forum/remark,10104282 Thu, 29 Apr 2004 10:56:13 EDT Re: Blocklisting? Ho hum http://www.dslreports.com/forum/remark,10083454 nixen : 

    blocked using dynablock.njabl.org (total: 780)
         162   comcast.net
          57   rr.com
          55   optonline.net
          48   pacbell.net
          35   ameritech.net
          34   attbi.com
          22   dsl-verizon.net
          19   adelphia.net
          19   swbell.net
          19   t-dialin.net
          16   charter.com
          14   verizon.net
          13   telus.net

I use RBL's to help cut back the SPAM influx. One such RBL specifically targets dynamic IP sources. The above is a partial report for my home mail servers.

The ones at work, in the space of six hours, used this same RBL to block over 15,000 emails. The distribution of guilty domains was nearly identical to the above and in roughly the same proportions. So, take each of those number and multiply by fifteeen and change. You'll see how much a simple RBL on a moderately busy server can block.

-tom

--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"]]> http://www.dslreports.com/forum/remark,10083454 Tue, 27 Apr 2004 03:02:05 EDT Re: Dirty Spaniards! http://www.dslreports.com/forum/remark,10079569 TheToro : que te folle un gorila. gilipollas.]]> http://www.dslreports.com/forum/remark,10079569 Mon, 26 Apr 2004 18:58:04 EDT Re: Dirty Spaniards! http://www.dslreports.com/forum/remark,10079005 anon : :o I love it when tu mama me toca las pelotas! Spanish pussies should be banned from world participation.]]> http://www.dslreports.com/forum/remark,10079005 Mon, 26 Apr 2004 18:00:25 EDT Re: Dirty Spaniards! http://www.dslreports.com/forum/remark,10077466 SuperJudge :
said by TheToro See Profile:
WTF are you talking about? i bet you dont know where is SPain, even you'd have to spend 30min to find Canada in a map.
No hables de algo que no sepas. ¿ por qué siempre tiene que haber un "toca pelotas" en todos los sitios?
Did I hurt your feelings? I used to live 50 minutes from Canada, which is roughly a half an inch on a map, or about a centimeter. Spain was about a foot away, or just a smidgun over 30 centimeters. Probably about 16 hours, never flown, but I wouldn't be surprised if there was a stopover in Lisbon. Jerk.
--
Updated My Journal
TP&C]]> http://www.dslreports.com/forum/remark,10077466 Mon, 26 Apr 2004 15:10:52 EDT Re: Dirty Spaniards! http://www.dslreports.com/forum/remark,10077222 TheToro : WTF are you talking about? i bet you dont know where is SPain, even you'd have to spend 30min to find Canada in a map.
No hables de algo que no sepas. ¿ por qué siempre tiene que haber un "toca pelotas" en todos los sitios? ]]> http://www.dslreports.com/forum/remark,10077222 Mon, 26 Apr 2004 14:45:10 EDT Re: Dirty Spaniards! http://www.dslreports.com/forum/remark,10076370 SuperJudge : Then we must all eat hotdogs.]]> http://www.dslreports.com/forum/remark,10076370 Mon, 26 Apr 2004 13:04:15 EDT Re: Dirty Spaniards! http://www.dslreports.com/forum/remark,10076341 rstrandb : Maybe the spam blacklist is managed by uber-PETA people and this is their first overt move to world domination.
--
What....me worry?]]> http://www.dslreports.com/forum/remark,10076341 Mon, 26 Apr 2004 12:59:30 EDT Re: Blocklisting? Ho hum http://www.dslreports.com/forum/remark,10075957 ojing : His machine is clean. Latest AV, router and Macintosh help with that. But the IPs are dynamic and he gets allocated addresses that are on black lists. Curious, I was looking to see which ones but could not find any, I was hoping that BBR could shed some light on this. Was the Optimumonline rep spewing? Do they run open proxys or relays? Seems unlikely in this day and age but perhaps the only obstacle to spam on their system is via MAC addresses.

Don't know. Would be interesting to find out. Give us DSL users something to fling back into the face of the superfast optimumonline crowd (other than reliable mail and free dial-up accounts).]]> http://www.dslreports.com/forum/remark,10075957 Mon, 26 Apr 2004 12:15:07 EDT Re: Blocklisting? Ho hum http://www.dslreports.com/forum/remark,10075453 Rhobite : Well does he have any spam trojans? That would be my first question. My second question would be, what blocklists did he make it onto? Is his IP on the Spamcop spam sources list? Does he change IP often?
--
Jimmysquid.com - I take pictures.]]> http://www.dslreports.com/forum/remark,10075453 Mon, 26 Apr 2004 11:04:48 EDT Blocklisting? Ho hum http://www.dslreports.com/forum/remark,10075252 ojing : A friend of mine on Cablevision's OptimumOnLine gets blocklisted all the time. Perhaps once per week. Goes through the effort to get his particular address unblocked. Result? Nothing by Cablevision except to admit that a good portion of their users are spammers.

Can someone with more experience tell me whether their system is particularly non secure? (That was not an invitation to hack them, though I suspect that any attacks generated by the good people who visit this site would be totally swamped by the current spam.)]]> http://www.dslreports.com/forum/remark,10075252 Mon, 26 Apr 2004 10:28:56 EDT Dirty Spaniards! http://www.dslreports.com/forum/remark,10074727 SuperJudge : Take your ebullfighting dirty nasty stuff elsewhere! Enlarge your penis!]]> http://www.dslreports.com/forum/remark,10074727 Mon, 26 Apr 2004 09:05:46 EDT