Re: [mailop] Help with block at Shaw.ca

[Scott Undercofler via mailop]

Christine:

Ping me off list and I will get yer mail flowing. 

> On May 21, 2024, at 1:37 PM, Christine Borgia via mailop  
> wrote:
> 
> Good question, Richard, I'm not sure! However, Kent, I sent to those emails 
> and received an immediate response. You're a rockstar!
> 
> Chris
> 
> On Tue, May 21, 2024 at 3:23 PM Richard W via mailop  > wrote:
>> Since Shaw is now owned by Rogers, would that be a Yahoo issue?
>> 
>> Richard
>> 
>> On 2024-05-21 12:37 p.m., Christine Borgia via mailop wrote:
>> > Shaw.ca is completely blocking our transactional mail and we haven't 
>> > been able to make contact there. Wondering if there is anyone here that 
>> > I can talk to about it?
>> > 
>> > Thx!
>> > Chris
>> > 
>> > -- 
>> > *Christine Borgia*
>> > Staff Deliverability Specialist
>> > Shopify 
>> > 
>> > 
>> > 
>> > ___
>> > mailop mailing list
>> > mailop@mailop.org 
>> > https://list.mailop.org/listinfo/mailop
>> ___
>> mailop mailing list
>> mailop@mailop.org 
>> https://list.mailop.org/listinfo/mailop
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] T-Online Contact

[Scott Undercofler via mailop]

Replied off list. 

> On May 9, 2024, at 2:56 PM, Zachary Sverdrup via mailop  
> wrote:
> 
> Hey Everyone, 
> 
> I was wondering if anyone here has a contact at t-online and would be willing 
> to ask if i could reach out to them directly, or vice versa? 
> 
> We have been having a heck of a time with delivery for one of our clients and 
> have gotten a number of conflicting answers from reaching out to the 
> postmaster address. We are entering month 2 of this saga and i'm just hoping 
> to get some clarification and confirmation on what the next steps are. 
> 
> Thank you
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Bounces at cox.net (AUP#CXSNDR)

[Scott Undercofler via mailop]

Replying off list

> On Feb 28, 2024, at 7:04 AM, Simplelists - Andy Beverley via mailop 
>  wrote:
> 
> Hi all,
> 
> Has anyone seen an uptick in bounces in the last day or so to cox.net? We're 
> seeing many (but not all) emails bounce, showing what are described as 
> SPF/DKIM failures (AUP#CXSNDR), but as far as we can tell the emails should 
> authenticate correctly. IP range is 78.143.254.0/24.
> 
> Is there anyone at Cox that can help?
> 
> Thanks,
> 
> Andy
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Support contact for Shaw.ca

[Scott Undercofler via mailop]

I never was good at goodbye. 

> On Feb 7, 2024, at 6:10 AM, Jaroslaw Rafa via mailop  
> wrote:
> 
> Dnia  6.02.2024 o godz. 15:26:33 Aric Archebelle-Smith via mailop pisze:
>> Beginning in late January, we received user reports that mail was not
>> being delivered to Shaw.ca addresses.  Users did not receive a
>> non-delivery notification, but our logs show the following rejection:
>> `status=sent (250 2.0.0 xxx...@pobox.com sender rejected.)`
> 
> Wonderful nonsense. Status code 250 and "sender rejected".
> -- 
> Regards,
>   Jaroslaw Rafa
>   r...@rafa.eu.org
> --
> "In a million years, when kids go to school, they're gonna know: once there
> was a Hushpuppy, and she lived with her daddy in the Bathtub."
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Support contact for Shaw.ca

[Scott Undercofler via mailop]

Replied of list. Sent from my iPhoneOn Feb 6, 2024, at 1:42 PM, Aric Archebelle-Smith via mailop  wrote:Hi all,I'm also looking for a contact for Shaw.ca, but it is not related to the changes due to the SMTP smuggling vulnerability. I've reached out to postmas...@shaw.ca, but have not received a response. Beginning in late January, we received user reports that mail was not being delivered to Shaw.ca addresses. Users did not receive a non-delivery notification, but our logs show the following rejection: status=sent (250 2.0.0 xxx...@pobox.com sender rejected.)If anyone could point me in the right direction, it'd be greatly appreciated.Cheers,Aric Archebelle-Smith___mailop mailing listmailop@mailop.orghttps://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Support contact for Shaw.ca

[Scott Undercofler via mailop]

Im replying on list for visibility. The issue you’re seeing is directly related 
to SMTP smuggling which was discussed on list ad nauseam about a month ago. The 
servers at shaw are configured to reject non-RFC bare linefeeds. Can you 
elaborate on why you’re sending them as they are not allowed. 

> On Feb 1, 2024, at 5:52 PM, Hugh E Cruickshank via mailop  
> wrote:
> 
> Hi All:
> 
> We are experiencing a problem with mail delivery to Shaw.ca. Since
> January 18th messages have been bounced with: 552 5.2.0 Message contains
> bare CR and is violating 822.bis section 2.3. We have tried to contact
> postmas...@shaw.ca but have not received any response yet. I was
> wondering if there was anyone on this list who could provide a support
> contact at shaw.ca that might be able assist us with identifying and
> correcting this issue.
> 
> Any suggestions would be greatly appreciated.
> 
> Regards, Hugh
> 
> -- 
> Hugh E Cruickshank, Forward Software, www.forward-software.com
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Cox.net contact

[Scott Undercofler via mailop]

Fwiw I replied offlist but never heard back. 


Sent from my iPhone

> On Nov 30, 2023, at 5:02 PM, Michael Peddemors via mailop  
> wrote:
> 
> On 2023-11-30 12:39, Philip Paeps via mailop wrote:
>>> On 2023-12-01 06:59:21 (+1300), Mamidi, Sandeep via mailop wrote:
>>> We need cox.net post master details . Any one from cox.net ?
>> Instead of going through bounces weekly, and contacting mailbox providers in 
>> alphabetical order asking for mitigation, perhaps Broadridge could attempt 
>> to address the root cause.
>> Philip
> 
> +1...
> 
> host broadridge.com
> 
> broadridge.com has address 3.220.214.71
> broadridge.com has address 3.219.78.25
> broadridge.com has address 3.220.212.11
> broadridge.com mail is handled by 10 mxb-001b6a02.gslb.pphosted.com.
> broadridge.com mail is handled by 10 mxa-001b6a02.gslb.pphosted.com.
> 
> host 3.220.214.71
> 71.214.220.3.in-addr.arpa domain name pointer 
> ec2-3-220-214-71.compute-1.amazonaws.com
> 
> Just saying..
> 
> 
> 
> --
> "Catch the Magic of Linux..."
> 
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at http://www.linuxmagic.com @linuxmagic
> A Wizard IT Company - For More Info http://www.wizard.ca
> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> 
> 604-682-0300 Beautiful British Columbia, Canada
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Contact for Cox.net

[Scott Undercofler via mailop]

Responded off list. 

Sent from my iPad

> On Oct 26, 2023, at 8:09 PM, Tarun Singh via mailop  wrote:
> 
> Hello All,
> 
> Do we have folks from Cox.net on this distro? Or, does anyone knows how to 
> reach out to them? 
> 
> -Tarun 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] authentication hacks, I Need someone from AOL and/or Yahoo to contact me

[Scott Undercofler via mailop]

I didn’t want to even post the link but… At one point in my life I had over a 
hundred thousand  subs relying on this. 

Omg I’m old. 

Sent from my iPhone

> On Jul 25, 2023, at 10:55 PM, John Levine via mailop  
> wrote:
> 
> It appears that Mike Hillyer via mailop  said:
>> So, before allowing access to submission service, Postfix consults IMAP 
>> server (Dovecot in this case) to check if there is actually a
>> currently existing authenticated IMAP session from that IP address. Only if 
>> such a session exists, connection is allowed and the client
>> may proceed to authentication attempt. Otherwise, the connection is 
>> immediately rejected.
> 
> This is a very old idea.  See https://en.wikipedia.org/wiki/POP_before_SMTP
> 
> It's not clear who originally invented it.  It may have been me.
> 
> R's,
> John
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Anyone from Cox on the list that can help me out?

[Scott Undercofler via mailop]

Replied off list. 

> On Jun 9, 2023, at 8:21 AM, Michael E. Weisel via mailop  
> wrote:
> 
> Hi fellow Mailopers, I hope everyone had a great week.  I was wondering if 
> there was anyone on the list from the Cox Postmaster team that may be able to 
> contact me off list?  I’m trying to help one of our clients who had a sudden 
> block on Monday/Tuesday, but I haven’t gotten a response back from 
> unblock.requ...@cox.net .  Thank you in 
> advance for the help.
>  
>  
>  
> Thanks,
>  
> Michael
>  
> Michael E. Weisel
> CTO / Deliverability Lead
> Gold Lasso
> (301) 990-9857 Corporate
> (240) 813-0174 Direct Dial
>  
> ___
> mailop mailing list
> mailop@mailop.org 
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] sender domain reputation

[Scott Undercofler via mailop]

Like .tk and .ml that are free? Sent from my iPhoneOn Mar 21, 2023, at 10:09 PM, Frost The Fox via mailop  wrote:I have heard of domains that were quite popular for spamming like xyz/info being outright blocked. My domain is completely blocked by Comcast without having ever successfully sent mail to them. I'm guessing in that case it is the TLD, as the domain had been registered for a couple years or so before I noticed.On Tue, Mar 21, 2023 at 11:58 PM Scott Undercofler via mailop <mailop@mailop.org> wrote:This is kinda a deep question. IMO, the short answer is yes. Many receivers flat block or severely restrict sketch TLDs. I’d say there are exceptions (.bank, which is monitored) you do gain an advantage with common TLDs. 

Sent from my iPhone

> On Mar 21, 2023, at 7:28 PM, fh--- via mailop <mailop@mailop.org> wrote:
> 
> Hello
> 
> Does sender domain itself have influence on delivery reputation? is new domain worse than old one? and xyz/info/pub/... domains worse than .com one?
> 
> Thanks
> corey
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

___mailop mailing listmailop@mailop.orghttps://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] sender domain reputation

[Scott Undercofler via mailop]

This is kinda a deep question. IMO, the short answer is yes. Many receivers 
flat block or severely restrict sketch TLDs. I’d say there are exceptions 
(.bank, which is monitored) you do gain an advantage with common TLDs. 

Sent from my iPhone

> On Mar 21, 2023, at 7:28 PM, fh--- via mailop  wrote:
> 
> Hello
> 
> Does sender domain itself have influence on delivery reputation? is new 
> domain worse than old one? and xyz/info/pub/... domains worse than .com one?
> 
> Thanks
> corey
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Re: Question of SPF record

[Scott Undercofler via mailop]

I was far too lazy on a Sunday night to look it up. :)Sent from my iPhoneOn Feb 5, 2023, at 6:43 PM, Kevin A. McGrail via mailop  wrote:
  

  
  
To add onto this, rarely will you want to divine the IP addresses
  of your service providers.  Contact them for their include
  record.  From searching the interweb, it seems these are likely
  what you want:

 include:_spf.perfora.net
  include:_spf.kundenserver.de include:spf.mailjet.com
If you really want the IPs, here you go:
https://www.ionos.com/help/email/postmaster/ip-addresses-of-the-11-ionos-mail-servers/
Regards,
KAM

On 2/5/2023 8:21 PM, Scott Undercofler
  via mailop wrote:


  RAPTOR REMARK: Alert! Please be careful! This email is from an EXTERNAL sender. Be aware of impersonation and credential theft.

Ionos has an spf include. Use it. Or just put all four ips in your record. 

Sent from my iPhone


  
On Feb 5, 2023, at 5:43 PM, H via mailop  wrote:

I have a domain with multiple email addresses hosted by Ionos. I have found that outgoing emails can come from a range of Ionos email IPs.

I have created a TXT record for my domain containing one IP4 address but outgoing emails seem to be sent from different IP4 addresses. As an example I now have:

v=spf1 a mx ip4:74.208.4.194 ~all

I know I can add at least one more ip4 address using the same format but I am not sure exactly what the Ionos email ip range might be so:

- Is there a way of saying eg. ip4:72.20.8.*

- Or should I delete the ip4 component and instead add:

include:mydomain.tld (corrected of course)

Suggestions appreciated!

Thanks.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

  
  ___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


  

___mailop mailing listmailop@mailop.orghttps://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Question of SPF record

[Scott Undercofler via mailop]

Ionos has an spf include. Use it. Or just put all four ips in your record. 

Sent from my iPhone

> On Feb 5, 2023, at 5:43 PM, H via mailop  wrote:
> 
> I have a domain with multiple email addresses hosted by Ionos. I have found 
> that outgoing emails can come from a range of Ionos email IPs.
> 
> I have created a TXT record for my domain containing one IP4 address but 
> outgoing emails seem to be sent from different IP4 addresses. As an example I 
> now have:
> 
> v=spf1 a mx ip4:74.208.4.194 ~all
> 
> I know I can add at least one more ip4 address using the same format but I am 
> not sure exactly what the Ionos email ip range might be so:
> 
> - Is there a way of saying eg. ip4:72.20.8.*
> 
> - Or should I delete the ip4 component and instead add:
> 
> include:mydomain.tld (corrected of course)
> 
> Suggestions appreciated!
> 
> Thanks.
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] syncaor/centurylink/hughes contact?

[Scott Undercofler via mailop]

Nevermind, found it in splunk. 174.138.31.223 is the issue, as its included in 
your emails that are getting marked phish because of massive phish traffic from 
that ip. I submitted it for mitigation. 

 

 

Yes, thanks. I got other replies as well and will follow up if needed.

 

On Tue, Aug 24, 2021 at 6:55 PM Udeme Ukutt  wrote:

Russell, I replied you off list. 

 

- Udeme 

 

On Tue, Aug 24, 2021 at 8:14 PM Russell Clemings via mailop  
wrote:

Does anyone on this list have a contact for Synacor, or at least one of the 
ISPs that appear to use them (centurylink.net, hughes.net, wowway.com, tds.net, 
q.com, possibly others)?

We're seeing false-positive bounces ("554 5.7.1 [VI-1] Message blocked due to 
spam content in the message") from each of those.

We're a non-profit trade association that, among other things, has an opt-in 
service for job advertisements. Those are being rejected, along with other 
organizational emails (e.g. opt-in updates on website content).

Emails to postmaster@ have gone unanswered for more than a week and I don't see 
any relevant contacts on any of their websites.

Thanks in advance for any help.




-- 

===
Russell Clemings


===

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop



-- 

===
Russell Clemings


===

___ mailop mailing list 
mailop@mailop.org https://list.mailop.org/listinfo/mailop 

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] SORBS contact

[Scott Undercofler via mailop]

I confirm your issue.  I can’t open a ticket nor can I get a response. 

> On Aug 23, 2021, at 3:43 PM, Lukas Tribus via mailop  
> wrote:
> 
> 
> 
>> On Monday, 23 August 2021, Stuart Hochwert  wrote:
>> Re:  SORBS contact
>> 
>> We are confirmed opt-in.  So we send a COI request before adding an email to 
>> our database. Every few years our confirmation server picks up a SORBS 
>> listing.  In fact it happened this month, first time since 2018. Their site 
>> is a tad hard to navigate, maybe since we login rarely, but we created a 
>> ticket and got the listing removed within a few hours.  I suggest you create 
>> an account. Then create a ticket from your account.
> 
> 
> I do have an account, and I did try the open a ticket.
> 
> Their systems falls over when trying to open a ticket, with the error 
> messages provided in my first mail.
> 
> Did you succesfully open a ticket within the last 7 days?
> 
> 
> thanks,
> lukas
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Vade - Blacklisting

[Scott Undercofler via mailop]

I replied to Scott off list but it might have gotten spam foldered. 

> On Aug 16, 2021, at 7:32 PM, Al Iverson via mailop  wrote:
> 
> You might find https://sendertool.vadesecure.com/ to be a better way
> to work through the issue.
> 
> Good luck,
> Al Iverson
> 
>> On Mon, Aug 16, 2021 at 12:24 PM Scott Mutter via mailop
>>  wrote:
>> 
>> Anybody from Vade on the list able to give any details as to why 
>> 66.11.124.112 is listed?
>> 
>> Apparently Comcast uses Vade as part of their blacklist and this IP is being 
>> blocked by Comcast's mail servers
>> 
>> 554 resimta-po-40v.sys.comcast.net resimta-po-40v.sys.comcast.net 
>> 66.11.124.112 found on one or more DNSBLs, see 
>> http://postmaster.comcast.net/smtp-error-codes.php#BL001000
>> 
>> Going to http://postmaster.comcast.net/smtp-error-codes.php#BL001000 leads 
>> to a spill where they pass the buck to Vade.
>> 
>> Would really like to know why this IP is listed with Vade.  Or does Vade 
>> just add IPs to their blacklist because they can?
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
> 
> 
> 
> -- 
> Al Iverson // Wombatmail // Chicago
> Deliverability: https://spamresource.com
> DNS Tools: https://xnnd.com
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Bank Of America

[Scott Undercofler via mailop]

Hi all, if someone with Bank Of America could reach out, that would be great. 
Im having reject issues with your ealert and SPF. Thanks in advance. 

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Trend Mico

[Scott Undercofler via mailop]

Anyone from Trend that could contact me off list? I have three ips submitted 
for mitigation that aren’t being mitigated. Thanks In advance. 
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Is Spectrum trying to sunset rr.com and twc.com emails?

[Scott Undercofler via mailop]

Nobody should listen to me at all because I have the memory of a goldfish. But 
in a past life I knew lots about splat.rr.com. There were royalty issues with 
the RoadRunner domains but I'm fairly sure Spectrum bought out the domain at 
least. I do know it (rr.com) under markmonitor through spectrum. 

There are millions of roadrunner.com and splat.rr.com users out there. While 
they had intended to move all new emails to a branded domain, that process is 
long and drawn out. 

On 2/8/20, 8:08 PM, "mailop on behalf of John Levine via mailop" 
 wrote:

In article <1692699245.1838651.1581216535504.javamail.zim...@baylink.com>,
Jay R. Ashworth via mailop  wrote:
>Does anyone on the list know if there's such a sunset policy in process?

I doubt it.  My twcny.rr.com address still works even though I haven't been
a Spectrum customer for quite a while.

For all the reasons you cite it's much easier to keep the old
addresses working even as you merge the infrastructure.  I mean,
aol.com addresses aren't going away even though they're now running on
ex-Yahoo Verizon systems.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop




___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] TWC/RR/Spectrum contact?

[Scott Undercofler via mailop]

Whats your source IP?On June 14, 2019 at 10:51 AM Brielle Bruns via mailop  wrote:Anyone know of a TWC/RR/Spectrum mail admin contact?Got a situation where they're temp failing:(host dnvrco-cmedge01.email.rr.com[69.134.155.135] refused to talk to me: 554 dnvrco-cmimta03 esmtp ESMTP server not available AUP#I-1000)On mails from one of my mail servers.Only mail coming from it is ecommerce physical product orders/invoices/shipping notifications, notifications of won IRL auctions, and various communications with our suppliers.No spam, no compromised/trojan mails, etc.Various sites and old docs from RR/TWC say to go to the TWC postmaster page, which doesn't exist anymore and redirects to an absolutely useless Spectrum mail page.Found delivery-supp...@postmaster.rr.com, so sent an e-mail to there yesterday, but haven't heard anything/gotten a response.  No clue if anyone even bothers to read it.Thanks!-- Brielle BrunsThe Summit Open Source Development Grouphttp://www.sosdg.org/ http://www.ahbl.org___mailop mailing listmailop@mailop.orghttps://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] About to blacklist Marketo - has anyone received non-spam from them?

[Scott Undercofler via mailop]

Politicians may have exempted themselves but report as spam says otherwise. We 
are in a constant battle with local and state elected officials both as 
customers and senders who refuse to even try to follow best sending practices. 
And I’ve personally had rather self important officials tell me how it SHOULD 
be. Were it not so frustrating, those conversations would be comical. 

One Illinois state rep asked for a reference for help getting his mailings 
sorted out, and after a week fired the reference because they told him the same 
thing I did. 



> On May 30, 2019, at 8:20 PM, Jay Hennigan via mailop  
> wrote:
> 
>> On 5/28/19 13:21, Brett Schenker via mailop wrote:
>> Two real world examples would be elected officials to be contacted and some 
>> corporations to be contacted. The former absolutely has reasons to be bulk 
>> emailed, the latter possibly too. Both would be "published" email addresses. 
>> For your average person, probably not but it's not a hard 100% rule as 
>> stated.
> 
> Elected officials publishing their addresses for constituents to contact them 
> aren't likely to get much in the way of bulk email from ESPs. Constituents 
> are going to write directly regarding a specific concern.
> 
> Elected officials and those running for office scraping email addresses from 
> DMV records and those poor souls who don't understand the consequences of 
> putting an email address or phone number on a voter registration form WILL 
> use ESPs and robodialers[1] to spam their constituents back to the stone age.
> 
> In many areas, DMV and voter registration forms do have a place for phone 
> number and email address. Permission for anyone other than DMV officers or 
> election officials respectively to use that address can never be reasonably 
> implied. M3AAWG sums it up as follows: "When a person gives a company, a 
> group, or an individual permission to market to him or her, that permission 
> is provided exclusively to the party in question."
> 
> [1] Politicians conveniently exempted themselves from the provisions of the 
> TCPA.
> 
> -- 
> Jay Hennigan - j...@west.net
> Network Engineering - CCIE #7880
> 503 897-8550 - WB6RDV
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] T-Mobile contact?

[Scott Undercofler]

Anyone from T-Mobile on the list that could contact me either on or off list? 
Thanks in advance. 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] anyone from psu.edu ?

[Scott Undercofler]

Isnt mail-abuse now owned by Trendmicro?On August 8, 2018 at 10:29 AM Carl Byington  wrote:-BEGIN PGP SIGNED MESSAGE-Hash: SHA512IsThe psu.edu mail servers are returning an error message:reason: 551 5.7.1 $IP blacklisted due to listing on www.mail-abuse.orgwhich is interesting, since that name has a cname, but no A record.Anyone know what list they are actually checking against?-BEGIN PGP SIGNATURE-Version: GnuPG v2.0.14 (GNU/Linux)iEYEAREKAAYFAltrGmoACgkQL6j7milTFsFw8wCfQbPCBU6cMVi5nLDZ7VeWQhzIpi8An104CkpSCDAijsq7tc1icK6qaZ/9=tXby-END PGP SIGNATURE-___mailop mailing listmailop@mailop.orghttps://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] verizon.com Postmaster

[Scott Undercofler]

Out of some morbid curiosity, can you elaborate or post a session or log?

> On May 8, 2018, at 9:00 PM, postmas...@akxnet.de wrote:
> 
> Hi!
> 
> Does anyone know how to reach the verizon.com Postmaster.
> 
> Being a customer there (but the company publishes no email contact
> address and customer support cannot help), they try to send me mail to
> my own mail server but violating the smtp protocol (HELO command) so my
> server rejects those mails.
> 
> I would like to make them aware of that.
> 
> Regards,
> 
> Andreas
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] RoadRunner Help?

[Scott Undercofler]

Can you send me ips and the last time you got that? 

> On Feb 14, 2018, at 1:25 PM, Al Iverson  wrote:
> 
> On Wed, Feb 14, 2018 at 3:06 PM, Michael Peddemors
>  wrote:
>> Yes, stop using obfuscated MAIL FROM's 
> 
> It's not really wise to use non-obfuscated return paths when using
> VERP. If it's easily decodable, a goofball could spin up fake ones to
> try to get 'em logged as legitimate bounces and inhibit future
> delivery of certain messages to certain recipients. Is it
> common/likely? No, but I don't want to be the first to experience it.
> It's yet another place you wouldn't want to intentionally expose PII.
> 
> -- 
> al iverson // wombatmail // miami
> http://www.aliverson.com
> http://www.spamresource.com
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Postmaster contact for 1&1

[Scott Undercofler]

https://www.spamhaus.org/query/ip/82.165.159.133

That’s what I get sending from their outbound. It’s not consistent so I assume 
not all of their space is listed. 

> On Feb 14, 2018, at 4:00 AM, Stefan Haunß  wrote:
> 
> 
> 
>> On 02/14/2018 10:51 AM, Suresh Ramasubramanian wrote:
>> His users might want to receive mail from 1&1 users, and 1&1 outbounds being 
>> on spamhaus stops this from happening?
> "might want"...I don't know him so I want more details...
>> 
>> In cases like this, it is up to 1&1 to work out the block, rather than 
>> expecting operators to put in place a whitelist.
> 
> of course http://postmaster.1and1.com is public and if you read the
> following section carefully "IP Addresses for 1&1 Mail Servers" one
> might come to the conclusion that there is no problem...
>> 
>> --srs
>> 
>> On 14/02/18, 3:17 PM, "mailop on behalf of Stefan Haunß" 
>>  wrote:
>> 
>>Scott,
>> 
>>if you could describe your problem a bit more detailed you might get
>>helped. why do you care of outbound IPs listed on spamhaus? are you a
>>1and1 customer?
>> 
>>Cheers,
>>Stefan
>> 
>> 
>>>On 02/14/2018 06:13 AM, - - wrote:
>>> Y'all have your outbound listed on spamhaus and I'm taking a lot of heat
>>> for deliverability issues from your space. Please contact me or request
>>> spamhaus removal for your outbounds. Your courteous support staff hung
>>> up on me when I tried to explain that the AUP code I had would not make
>>> sense to your deliverabilty team. 
>>> 
>>> Thanks in advance. 
>>> 
>>> 
>>> 
>>> ___
>>> mailop mailing list
>>> mailop@mailop.org
>>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>>> 
>> 
>>___
>>mailop mailing list
>>mailop@mailop.org
>>https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>> 
>> 
>> 
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>> 
> 
> -- 
> BFK edv-consulting GmbH   http://www.bfk.de
> Kriegsstraße 100  tel: +49-721-96201-1
> D-76133 Karlsruhe fax: +49-721-96201-99
> Managing Director: Christoph Fischer HRB105469 Mannheim
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Extreme amounts of SMTP auth from microsoft/outlook IPs

[Scott Undercofler]

Its hitting a set of accounts over and over and over at least on my “older” 
system. On the newer system, Im blocking them for too many connections today so 
its hard to tell. 

Strangely enough the MS contacts on this list haven’t chimed in….



> On Feb 9, 2018, at 2:56 PM, Dave Warren via mailop  wrote:
> 
> On 2018-02-09 14:20, John Levine wrote:
>> In article 
>>  you 
>> write:
>>> I'm confused, the first post said valid credentials, is that what everyone
>>> else is seeing?
>>> 
>>> Nearly all valid creds seems weirder than mostly invalid... modulo whatever
>>> amount of hijacked or reused creds there are.
>> Remember that Outlook does account consolidation like Gmail does, and
>> outgoing mail for a consolidated address usually goes through the
>> account's own server to make it more DMARC-y.
>> It's not surprising that Outlook would be doing valid SMTP AUTH, but you 
>> would
>> expect it to send a message after it does so.
> 
> I could imagine them doing a periodic recheck to validate passwords or find 
> problems too, but I would only expect a single connection per account.
> 
> For those seeing this, is it hitting the same account more than once, or just 
> once per account?
> 
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Extreme amounts of SMTP auth from microsoft/outlook IPs

[Scott Undercofler]

NetRange:   40.74.0.0 - 40.125.127.255
CIDR:   40.124.0.0/16, 40.74.0.0/15, 40.120.0.0/14, 40.125.0.0/17, 
40.80.0.0/12, 40.76.0.0/14, 40.112.0.0/13, 40.96.0.0/12
NetName:MSFT
NetHandle:  NET-40-74-0-0-1
Parent: NET40 (NET-40-0-0-0-0)

That, plus 

NetRange:   132.245.0.0 - 132.245.255.255
CIDR:   132.245.0.0/16
NetName:MICROSOFT
NetHandle:  NET-132-245-0-0-1
Parent: NET132 (NET-132-0-0-0-0)

There are a few others but those are the most prevalent from what I see. They 
are snowshoeing many ranges within the blocks. 

> On Feb 9, 2018, at 9:23 AM,   wrote:
> 
> It could be the outlook/Acompli app infrastructure which is now hosted in 
> Azure.  The   What specific IPs are you seeing?
> 
> -David
> 
> -Original Message-
> From: mailop  On Behalf Of Brotman, Alexander
> Sent: Friday, February 9, 2018 8:00 AM
> To: Dan Malm ; mailop@mailop.org
> Subject: Re: [mailop] Extreme amounts of SMTP auth from microsoft/outlook IPs
> 
> Not sure if I'd call it extreme, but a marked increase beginning Feb 6th.  
> 
> --
> Alex Brotman
> Sr. Engineer, Anti-Abuse
> Comcast
> 
> 
> -Original Message-
> From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Dan Malm
> Sent: Friday, February 09, 2018 3:57 AM
> To: mailop@mailop.org
> Subject: [mailop] Extreme amounts of SMTP auth from microsoft/outlook IPs
> 
> Hi
> 
> I'm seeing an extreme amount of SMTP authentications (over 600/s) from the 
> microsoft owned 40.101.0.0/16 range on my customer SMTP servers.
> It's just auth, with valid credentials, and then it disconnects right after 
> so no attempts to send any mails have been done for the vast majority of 
> these connections. A small amount of valid mails are being sent from this 
> range though. HELO indicates it's from outlook.com. So seems like their 
> system for sending with your own domain through external servers has gone a 
> bit haywire...
> 
> I've sent ab...@microsoft.com a mail about it, but I'm a bit curious if 
> anyone else is seeing the same?
> 
> --
> BR/Mvh. Dan Malm, Systems Engineer, One.com
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Extreme amounts of SMTP auth from microsoft/outlook IPs

[Scott Undercofler]

On both systems I run, I would definitely call it extreme. To the point that I 
am about to block the 12+ ranges the traffic is coming from. We had a 10 fold 
increase in auth’s the past three days. 

I am unsure whats exactly being done with the auth attempts but its not normal. 


> On Feb 9, 2018, at 8:59 AM, Brotman, Alexander 
>  wrote:
> 
> Not sure if I'd call it extreme, but a marked increase beginning Feb 6th.  
> 
> --
> Alex Brotman
> Sr. Engineer, Anti-Abuse
> Comcast
> 
> 
> -Original Message-
> From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Dan Malm
> Sent: Friday, February 09, 2018 3:57 AM
> To: mailop@mailop.org
> Subject: [mailop] Extreme amounts of SMTP auth from microsoft/outlook IPs
> 
> Hi
> 
> I'm seeing an extreme amount of SMTP authentications (over 600/s) from the 
> microsoft owned 40.101.0.0/16 range on my customer SMTP servers.
> It's just auth, with valid credentials, and then it disconnects right after 
> so no attempts to send any mails have been done for the vast majority of 
> these connections. A small amount of valid mails are being sent from this 
> range though. HELO indicates it's from outlook.com. So seems like their 
> system for sending with your own domain through external servers has gone a 
> bit haywire...
> 
> I've sent ab...@microsoft.com a mail about it, but I'm a bit curious if 
> anyone else is seeing the same?
> 
> --
> BR/Mvh. Dan Malm, Systems Engineer, One.com
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] TWC refusing mail

[Scott Undercofler]

Yes. We are much smarter than that. 


> On Dec 18, 2017, at 7:38 AM, Charles McKean <charles.mckean.ml...@gmail.com> 
> wrote:
> 
> Or, perhaps TWC has made the very questionable choice to implement
> SORBS on a real ISP mail server. That would be one way to hold down
> load. Just randomly block a whole bunch of IP addresses that aren't
> actually spam sources.
> 
> The people at TWC are smarter than this, yes? Please tell me it isn't so.
> 
> On Sun, Dec 17, 2017 at 9:29 PM, Scott Undercofler <sco...@huenix.com> wrote:
>> Between outlook and .nl and .eu, we have been hammering away at spam the
>> last few weeks so some senders have been, perhaps unfairly, caught up in the
>> net. We weathered the holiday mail really well but have been pretty harsh on
>> snowshoers and hit and run spammers.
>> 
>> On Dec 17, 2017, at 6:13 PM, Andrew Barrett <andrew.barr...@gmail.com>
>> wrote:
>> 
>> I'm guessing that, like everyone else, TWC is just getting slammed with mail
>> sent by ESPs  for senders with holiday offers and the like, and is just not
>> as well equipped to handle it. Seems like every holiday season brings new
>> record volumes.
>> 
>> On Sun, Dec 17, 2017 at 7:53 PM, Michael Rathbun <m...@honet.com> wrote:
>>> 
>>> On Mon, 18 Dec 2017 08:57:34 +1100, Mark Dale <m...@mailmanlists.net>
>>> wrote:
>>> 
>>> 
>>>> Is it just us or are others experiencing this?
>>>> 
>>>> Any clues as to why would be greatly appreciated.
>>> 
>>> We're seeing it, with a sudden onset on the 14th.  The IPs send requested
>>> and/or transactional email, have excellent reputations, and are blocked
>>> nowhere else.
>>> 
>>> The response is completely uncharacteristic of the rejections outlined on
>>> the
>>> postmaster page.
>>> 
>>> The TWC IP reputation lookup gives clean bill of health.  Since there are
>>> no
>>> blocks, no remediation can be requested.
>>> 
>>> mdr
>>> --
>>>The Duckage Is Feep.
>>>   -- Vaul Pixie
>>> 
>>> 
>>> ___
>>> mailop mailing list
>>> mailop@mailop.org
>>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>> 
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>> 
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] TWC refusing mail

[Scott Undercofler]

Between outlook and .nl and .eu, we have been hammering away at spam the last 
few weeks so some senders have been, perhaps unfairly, caught up in the net. We 
weathered the holiday mail really well but have been pretty harsh on snowshoers 
and hit and run spammers. 

> On Dec 17, 2017, at 6:13 PM, Andrew Barrett  wrote:
> 
> I'm guessing that, like everyone else, TWC is just getting slammed with mail 
> sent by ESPs  for senders with holiday offers and the like, and is just not 
> as well equipped to handle it. Seems like every holiday season brings new 
> record volumes.
> 
>> On Sun, Dec 17, 2017 at 7:53 PM, Michael Rathbun  wrote:
>> On Mon, 18 Dec 2017 08:57:34 +1100, Mark Dale  wrote:
>> 
>> 
>> >Is it just us or are others experiencing this?
>> >
>> >Any clues as to why would be greatly appreciated.
>> 
>> We're seeing it, with a sudden onset on the 14th.  The IPs send requested
>> and/or transactional email, have excellent reputations, and are blocked
>> nowhere else.
>> 
>> The response is completely uncharacteristic of the rejections outlined on the
>> postmaster page.
>> 
>> The TWC IP reputation lookup gives clean bill of health.  Since there are no
>> blocks, no remediation can be requested.
>> 
>> mdr
>> --
>> The Duckage Is Feep.
>>-- Vaul Pixie
>> 
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] TWC refusing mail

[Scott Undercofler]

1010 is blacklisted. What ip space are you coming from? 

> On Dec 17, 2017, at 2:57 PM, Mark Dale  wrote:
> 
> Hi All,
> 
> We've recently started seeing mail get rejected ("deferred") by TWC.
> 
> An example error message in the mail log:
> 
> Dec 17 22:38:39 bissen postfix/smtp[27323]: 7ADBC2E851: 
> to=, 
> relay=dnvrco-cmedge02.email.rr.com[69.134.155.136]:25, delay=11160, 
> delays=11159/0.12/0.88/0, dsn=4.0.0, status=deferred (host 
> dnvrco-cmedge02.email.rr.com[69.134.155.136] refused to talk to me: 554 
> dnvrco-cmimta02 esmtp ESMTP server not available AUP#I-1010)
> 
> The IP address in the log entry (69.134.155.136) is TWC
> 
> The Time Warner Cable Block Query website reports that they are not blocking 
> mail from our server's IP and that our server's Return Path Sender Score 
> Reputation Score = 99.
> 
> Is it just us or are others experiencing this?
> 
> Any clues as to why would be greatly appreciated.
> 
> Best,
> Mark
> 
> 
> -- 
> 
> MailmanLists - hosted discussion lists
> Canberra, Australia
> Tel: +61 .2 61003121
> https://www.mailmanlists.net
> ===
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop