To: mailop@mailop.org
Subject: Re: [mailop] Spamhaus contact?
On 22/01/24 20:19, Curtis Maurand via mailop wrote:
Given my experience with spamhaus this week, I’m convinced that they are out to
put the small email provider out of business.
Well from what I can see we have samples from a few
On 22/01/24 20:19, Curtis Maurand via mailop wrote:
Given my experience with spamhaus this week, I’m convinced that they
are out to put the small email provider out of business.
Well from what I can see we have samples from a few days ago coming from
a domain for which you have opened a
[sNip]
> Given my experience with spamhaus this week, I´m convinced that they
> are out to put the small email provider out of business.
What was your experience with them?
(I ask, because based on what I've seen, Spamhaus been consistent
and impartial with their listing
Sent from my iPadOn Jan 15, 2024, at 1:40 PM, Mark Fletcher via mailop wrote:Hi All,One of groups.io's servers was listed by Spamhaus starting Saturday afternoon (https://www.spamhaus.org/sbl/query/SBL638016). I've been trying to contact them ever since, but they've been silent. I am humbly
> On 2024-01-19 at 15:42:49 UTC-0500 (Fri, 19 Jan 2024 12:42:49 -0800)
> Randolf Richardson, Postmaster via mailop
>
> is rumored to have said:
>
> > Spamhaus makes the DROP data available (which I believe is also
> > included in their SBL), which is useful for using firewalls to just
> >
Dnia 19.01.2024 o godz. 12:42:49 Randolf Richardson, Postmaster via mailop
pisze:
> UCE Protect also has level 3 listings for the worst offenders,
> although I don't recall the list being downloadable for firewall use:
>
> UCEPROTECT Blacklist Policy LEVEL 3
>
On 2024-01-19 at 15:42:49 UTC-0500 (Fri, 19 Jan 2024 12:42:49 -0800)
Randolf Richardson, Postmaster via mailop
is rumored to have said:
Spamhaus makes the DROP data available (which I believe is also
included in their SBL), which is useful for using firewalls to just
block or ignore
> On 2024-01-19 12:42, Randolf Richardson, Postmaster via mailop wrote:
> >> On 2024-01-19 06:47, Atro Tossavainen via mailop wrote:
> >>> On Fri, Jan 19, 2024 at 03:31:19PM +0100, hg user wrote:
> Ok sorry not "most" but "some may"...
>
> My checkpoint rep said that they get their
On 2024-01-19 12:42, Randolf Richardson, Postmaster via mailop wrote:
On 2024-01-19 06:47, Atro Tossavainen via mailop wrote:
On Fri, Jan 19, 2024 at 03:31:19PM +0100, hg user wrote:
Ok sorry not "most" but "some may"...
My checkpoint rep said that they get their reputation lists from other
> On 2024-01-19 06:47, Atro Tossavainen via mailop wrote:
> > On Fri, Jan 19, 2024 at 03:31:19PM +0100, hg user wrote:
> >> Ok sorry not "most" but "some may"...
> >>
> >> My checkpoint rep said that they get their reputation lists from other
> >> companies... is it wrong ?
> >
> > It's possible
On 2024-01-19 06:47, Atro Tossavainen via mailop wrote:
On Fri, Jan 19, 2024 at 03:31:19PM +0100, hg user wrote:
Ok sorry not "most" but "some may"...
My checkpoint rep said that they get their reputation lists from other
companies... is it wrong ?
It's possible that Check Point are just an
It appears that hg user via mailop said:
>Since most RBLs exchange data, ...
No, they don't. Can we leave the conpsiracy theories at home, please?
R's,
John
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
>> Small pedantic point: DNSBLs, not RBLs.
>
> As an erstwhile MAPS employee, the persistence of this pedantry warms my
> heart...
me too (on both counts)
> Also, to author[-1], I think it is a bit of a misimpression that DNSBL
> operators share data. In some cases they may have
On 2024-01-19 at 09:31:19 UTC-0500 (Fri, 19 Jan 2024 15:31:19 +0100)
hg user via mailop
is rumored to have said:
Ok sorry not "most" but "some may"...
My checkpoint rep said that they get their reputation lists from other
companies... is it wrong ?
In all likelihood that means they don't
On 2024-01-19 at 05:31:12 UTC-0500 (Fri, 19 Jan 2024 10:31:12 +)
Graeme Fowler via mailop
is rumored to have said:
On 19 January 2024 06:13:20 hg user via mailop
wrote:
Since most RBLs exchange data
Small pedantic point: DNSBLs, not RBLs.
As an erstwhile MAPS employee, the
On Fri, Jan 19, 2024 at 03:31:19PM +0100, hg user wrote:
> Ok sorry not "most" but "some may"...
>
> My checkpoint rep said that they get their reputation lists from other
> companies... is it wrong ?
It's possible that Check Point are just an aggregator and don't actually
have first-hand data.
Ok sorry not "most" but "some may"...
My checkpoint rep said that they get their reputation lists from other
companies... is it wrong ?
On Fri, Jan 19, 2024 at 10:55 AM Atro Tossavainen via mailop <
mailop@mailop.org> wrote:
> > Since most RBLs exchange data,
>
> Source?
>
> --
> Atro
Atro Tossavainen via mailop skrev den 2024-01-19 10:48:
Since most RBLs exchange data,
Source?
sign up to dnswl.org, in that stage blacklists are checked, if accepted,
blacklists is then ignored :)
i dont know if others doing this, i really dont care
On 19 January 2024 06:13:20 hg user via mailop wrote:
Since most RBLs exchange data
Small pedantic point: DNSBLs, not RBLs.
Trend Micro would still assert that the term RBL is their trademark (so far
as I know), plus a non-small percentage of known DNS block lists could not
be even
> Since most RBLs exchange data,
Source?
--
Atro Tossavainen, Chairman of the Board
Infinite Mho Oy, Helsinki, Finland
tel. +358-44-5000 600, http://www.infinitemho.fi/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
Sorry, just to add that since monday we have also some problems with
checkpoint (the firewall) categorization filters. One of our public IP has
been flagged as adult only... then also IP from hpe (to download firmware),
from X and onedrive.
Since most RBLs exchange data, if one screws up, the
These are business email received by a tour operator from workers of
airlines and hotels, not from customers.
I will send some IP samples later
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
On 1/18/24 13:33, hg user via mailop wrote:
I also saw a spike in IP reported as malicious by spamhaus: IPs that
have been sending emails for years: standard, business emails from
personal accounts of people in airlines and hotels are now triggering
spamhaus IP rbl... those IPs are NOT from
Examples?
On 2024-01-18 13:33, hg user via mailop wrote:
I also saw a spike in IP reported as malicious by spamhaus: IPs that
have been sending emails for years: standard, business emails from
personal accounts of people in airlines and hotels are now triggering
spamhaus IP rbl... those IPs
I also saw a spike in IP reported as malicious by spamhaus: IPs that have
been sending emails for years: standard, business emails from personal
accounts of people in airlines and hotels are now triggering spamhaus IP
rbl... those IPs are NOT from big email providers.
On Tue, Jan 16, 2024 at
> On 16.01.2024 at 22:16 Atro Tossavainen via mailop wrote:
>
>
>>> https://www.talosintelligence.com/reputation_center/lookup?search=66.175.222.108
>> Thanks for this; I wasn't familiar with Talos Intelligence. Do they publish
>> a blocklist?
>
> Paying users only. Paying users include the
On 16.01.2024 at 17:25 Mark Fletcher via mailop wrote:
On Mon, Jan 15, 2024 at 4:19 PM Randolf Richardson, Postmaster via mailop
mailto:mailop@mailop.org>> wrote:
You'll likely be interested in the reputation score, which is
presently showing as "Poor" for that IP address
> > https://www.talosintelligence.com/reputation_center/lookup?search=66.175.222.108
> >
> Thanks for this; I wasn't familiar with Talos Intelligence. Do they publish
> a blocklist?
Paying users only. Paying users include the Finnish government's
internal outsourcing center (Valtori) and Telia
> On Mon, Jan 15, 2024 at 4:19PM Randolf Richardson, Postmaster via mailop <
> mailop@mailop.org> wrote:
>
> > You'll likely be interested in the reputation score, which is
> > presently showing as "Poor" for that IP address (66.175.222.108):
> >
> > Reputation Lookup ||
On Mon, Jan 15, 2024 at 4:19 PM Randolf Richardson, Postmaster via mailop <
mailop@mailop.org> wrote:
>
> You'll likely be interested in the reputation score, which is
> presently showing as "Poor" for that IP address (66.175.222.108):
>
> Reputation Lookup || Cisco Talos
> On Mon, Jan 15, 2024 at 11:00AM Udeme wrote:
>
> > Mark: looks like as of seconds ago the SBL´s been resolved & removed from
> > the SBL?
>
> Yes! That's great, but unfortunately and confusingly, it's switched to a
> different listing instead: https://www.spamhaus.org/query/ip/66.175.222.108
It appears that Atro Tossavainen via mailop said:
>> On Spamhaus' suggestion, I built a reverification system late last year and
>> tested it on a small group of users. Yesterday, I kicked off a
>> reverification to a much larger segment of users.
Yup, I got it yesterday for a list I'm on that's
>> On Spamhaus' suggestion, I built a reverification system late last
year and
>> tested it on a small group of users. Yesterday, I kicked off a
>> reverification to a much larger segment of users.
>
> Looking forward to seeing this in our traps.
Yeah, we're seeing that from 66.175.222.12
The listing’s details explain the problem. I’d start with researching the
details there.
As for a timeline, I’d shift the “concerns” towards fixing what caused the
listing. That being said, I can’t speak for Spamhaus. Good luck.
On Mon, Jan 15, 2024 at 2:16 PM Mark Fletcher wrote:
> On Mon,
> We're an email groups service, like Google Groups. Based on evidence
> provided by Spamhaus, it appears that some groups that migrated from Yahoo
> Groups when Y! Groups shut down contained some Spamhaus spamtrap addresses.
That might be the explanation for why some of your customers' lists
On Mon, Jan 15, 2024 at 11:00 AM Udeme wrote:
> Mark: looks like as of seconds ago the SBL’s been resolved & removed from
> the SBL?
>
Yes! That's great, but unfortunately and confusingly, it's switched to a
different listing instead: https://www.spamhaus.org/query/ip/66.175.222.108
Thanks,
Mark: looks like as of seconds ago the SBL’s been resolved & removed from
the SBL?
-Udeme
On Mon, Jan 15, 2024 at 1:41 PM Mark Fletcher via mailop
wrote:
> Hi All,
>
> One of groups.io's servers was listed by Spamhaus starting Saturday
> afternoon
Hi All,
One of groups.io's servers was listed by Spamhaus starting Saturday
afternoon (https://www.spamhaus.org/sbl/query/SBL638016). I've been trying
to contact them ever since, but they've been silent. I am humbly asking for
help.
We're an email groups service, like Google Groups. Based on
> On Sep 18, 2019, at 2:42 PM, Brett Schenker via mailop
> wrote:
>
> I pray for the day something like CASL or GDPR is used against a client
> because that will put the fear of god into the entire industry.
<3
Neil Schwartzman
Executive Director
Coalition Against Unsolicited Commercial
Brett, Linkedin suggests you work for NGP VAN. I've received spam from
your platform in the past and wasn't sure where to report it. Could
you clarify a couple of things for the group and world?
- Is there an abuse reporting address set up? Are reports to that
address read by humans and the
We got our entire range listed due to an action of a new client that wasn't
vetted by sales. I pinged the normal Spamhaus channel but wondering if
there's anyone I can reach out to speed up the process.
--
Brett Schenker
Man of Many Things, Including
5B Consulting - http://www.5bconsulting.com
We're seeing lots of our cloud provider (AWS) space listed in the PBL
tonight.
This is new, and AWS claims they don't share space with Spamhaus, so I've
been tasked with trying to contact Spamhaus about this.
Please contact me directly by any means shown below.
--
*todd herr*
*sr. delivery
42 matches
Mail list logo
