they were ignoring his MX records and going straight to his server

Verizon were calling back to the sending IP rather than the @sender.domain's MX?
Amazingly stupid, ie, par for the course for Verizon mail policies.  :)

Looking at verizon.net PTRs, I find 4 subdomains that connect to our MXs:

1. "pool", eg:

pool-71-248-230-252.cmdnnj.east.verizon.net[71.248.230.252]


2. "static", eg:

static-71-177-28-104.lsanca.dsl-w.verizon.net[71.177.28.104]


3. "sv..pub", eg:

sv10pub.verizon.net[206.46.252.146]


(4. verizon.net also has PTR relay.verizon.net (their unique MX record), but I have no log evidence that relay.verizon.net connects to our MXs )


Over the preceding 2 business days:

Total rejects of verizon.net for unknown recipients: 26831, which breaks down into:

Rejects of "pool" verizon.net for unknown recipients: 24698

Rejects of "static" verizon.net for unknown recipients: 1329

Rejects of "sv..pub" verizon.net for unknown recipients: 1159

Does verizon.net SAV use an obvious role account FROM:<[EMAIL PROTECTED]> for SAV probing? My logs show none but we've battled with Verizon so much that I think we are excepted from their SAV policy.

================

For the same preceding 2 days:

Total rejects of verizon.net for SAV failure: 5348, which breaks down into:

Rejects of "pool" verizon.net for SAV failure: 4524

Rejects of "static" verizon.net for SAV failure: 826

Rejects of "sv..pub" verizon.net for SAV failure: 0


So a good reject/scoring filter would be regular expression for PTR domain name field: /pool.*\.verizon\.net/

... which is very easy to do with IMGate.

It's obvious from above that verizon does not block outbound port 25 from their "pool" networks, which are badly infected with spam bots.
And their "static" nets are not totally clean.

So while hassling all of us with their weird mail policies, they also allow their infected pool $subscribers to hassle our MXs (subscriber-direct-to-MX abuse).

Len

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to