[users] Mail from list detected as Spam

Fabian Arrotin fabian.arrotin at arrfab.net
Wed Jan 24 21:25:19 CET 2007


On Wed, 2007-01-24 at 11:56 -0800, Alan Hodgson wrote:
> On Wednesday 24 January 2007 11:47, Dag Wieers <dag at wieers.com> wrote:
> > You base your logic that a reverse name lookup with 'adsl' in the
> > name is SPAM. I am telling you that this generalisation of the
> > definition SPAM is wrong. The example is this list.
> >
> 
> No one is saying the mail is spam.  It is just getting caught up in the 
> ever-escalating spam war.  The fact is, there are 70+ million botted 
> Windows machines out there, many of them sending spam, and their 
> reverse DNS is the only easy way to spot them.  The (maybe) few tens of 
> thousands of non-bot servers sending legitimate mail from similar 
> addresses are inevitably going to get screwed in the process.  
> 
> Greylisting works well enough for now, but when the spammers really 
> start to work around that, I wouldn't be surprised to see mass-blocking 
> of anything with what looks like a whole or partial IP address in the 
> reverse DNS.
> 
> If you look exactly like a bot, you're a lot more likely to be mistaken 
> for one.  Fixing your reverse DNS is one good way to differentiate 
> yourself from a bot and will prevent some mail delivery problems.
> 

Alan, i understand your opinion about setting up reverse dns, but
unfortunately this is not always possible. 
For example, several ISP in France and Belgium refuse to change the
reverse ip ! If you take contact with such providers to explain that
mail issued by your server behind a fixed ip address was rejected
because the reverse seemed to be a dynamic ip, they completely ignore
you ...
The spam war forces sometimes to close their mail servers with a lot of
plugins that can unfortunately block real mails .... i had my personal
server (with a correct PTR record ...) blocked because not of my ip, but
the complete netblock was listed at sorbs.net ... stupid ... only
because some of these IPs were used to send spam ...
I took contact with sorbs.net and their answer was : " You have been
included in a wider listing policy because your provider
is either hosting spammers or is not taking action to prevent spam from
being sent.
If you are part of a wider netblock that is blocked you are not required
to pay the SORBS 'fine' as the entry was not generated because of your
actions, however your netblock will not be removed until your upstream
removes the spammers.
They will then need to contact SORBS themselves to inform us of these
changes, there is nothing you can do yourself to have this listing
changed or removed from SORBS."

Nice, isn't it ?

-- 
Fabian Arrotin <fabian.arrotin at arrfab.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.rpmforge.net/pipermail/users/attachments/20070124/f9b68fd7/attachment.bin


More information about the users mailing list