RE: UCEProtect Level 3

2009-05-08 Thread John van Oppen
We had complaints about our entire ASN being listed too, due to a bunch of 
infected hosts in a sub-allocated /23 (out of our nearly /16 of space).  The 
best part is they don't bother to report the abuse, they just block the entire 
ASN, not terribly productive.


John van Oppen
Spectrum Networks LLC
Direct: 206.973.8302
Main: 206.973.8300
Website: http://spectrumnetworks.us


-Original Message-
From: Skywing [mailto:skyw...@valhallalegends.com] 
Sent: Thursday, May 07, 2009 10:31 PM
To: Suresh Ramasubramanian; Raleigh Apple
Cc: nanog@nanog.org
Subject: RE: UCEProtect Level 3

I seem to recall that Mailstreet/MXlogic firewalls off (not rejects at SMTP 
level) any AS listed in UCEProtect, at least of about a year or so ago.

- S

-Original Message-
From: Suresh Ramasubramanian ops.li...@gmail.com
Sent: Thursday, May 07, 2009 22:25
To: Raleigh Apple rap...@rapidlink.com
Cc: nanog@nanog.org nanog@nanog.org
Subject: Re: UCEProtect Level 3


On Fri, May 8, 2009 at 12:04 AM, Raleigh Apple rap...@rapidlink.com wrote:
 Is anyone else out there aware that the UCEProtect Level 3 email blacklist
 blocks entire AS?


Is there anyone out there aware of any significant (or larger than
'man and his dog on a DSL') mail provider using UCEPROTECT?

--
Suresh Ramasubramanian (ops.li...@gmail.com)



RE: UCEProtect Level 3

2009-05-07 Thread Aaron Wendel
Yes.  Is that a problem?



-Original Message-
From: Raleigh Apple [mailto:rap...@rapidlink.com] 
Sent: Thursday, May 07, 2009 1:34 PM
To: nanog@nanog.org
Subject: UCEProtect Level 3

Is anyone else out there aware that the UCEProtect Level 3 email 
blacklist blocks entire AS?

r





Re: UCEProtect Level 3

2009-05-07 Thread Colin Alston

On 2009/05/07 08:34 PM Raleigh Apple wrote:
Is anyone else out there aware that the UCEProtect Level 3 email 
blacklist blocks entire AS?


Yes. We don't use them anymore.



Re: UCEProtect Level 3

2009-05-07 Thread D'Arcy J.M. Cain
On Thu, 7 May 2009 13:43:14 -0500
Aaron Wendel aa...@wholesaleinternet.net wrote:
 Yes.  Is that a problem?

It is.  I understand what they are trying to do but we were cut off
from some places because someone else in the huge upstream we are with
did something that appeared to be spam.  It's too broad of a brush.

-- 
D'Arcy J.M. Cain da...@druid.net |  Democracy is three wolves
http://www.druid.net/darcy/|  and a sheep voting on
+1 416 425 1212 (DoD#0082)(eNTP)   |  what's for dinner.



Re: UCEProtect Level 3

2009-05-07 Thread Jeffrey Meltzer
We stopped using UCEProtect in most places recently after using for I think a 
year or two -- Level 2 was blacklisting giant-sized netblocks (ie, most 
Cablevision cablemodem IP Space, twice, as well as large chunks of AboveNet 
space, and that's just what I noticed).



- Original Message -
From: Raleigh Apple rap...@rapidlink.com
To: nanog@nanog.org
Sent: Thursday, May 7, 2009 2:34:01 PM GMT -05:00 US/Canada Eastern
Subject: UCEProtect Level 3

Is anyone else out there aware that the UCEProtect Level 3 email 
blacklist blocks entire AS?

r




Re: UCEProtect Level 3

2009-05-07 Thread Matt Liotta


On May 7, 2009, at 4:10 PM, D'Arcy J.M. Cain wrote:


It is.  I understand what they are trying to do but we were cut off
from some places because someone else in the huge upstream we are with
did something that appeared to be spam.  It's too broad of a brush.

Indeed. That is the sort of vigilantism that leads to filtering chaos.  
What happens when other ASNs start filtering the entire AS of  
UCEProtect's upstream(s) as a response?


-Matt



Re: UCEProtect Level 3

2009-05-07 Thread D'Arcy J.M. Cain
On Thu, 7 May 2009 16:21:26 -0400
Rich Kulawiec r...@gsp.org wrote:
 (a) This discussion should probably be happening someplace other
 than NANOG (spam-l or mailop, perhaps?), and

True.  I didn't bring it up but this is my last post on the subject.

 (b) If you feel that UCEProtect L3 paints with too broad a brush,
 then you're certainly free not to use it.  I happen to agree with you
 on this particular level of this particular DNSBL for my particular
 applications, so I don't use it either.  However: I'm aware of other
 folks who are using it quite effectively as *part* of a scoring system.

I don't use it but my problem was that other ISPs whose clients were
trying to email my clients were using it.

-- 
D'Arcy J.M. Cain da...@druid.net |  Democracy is three wolves
http://www.druid.net/darcy/|  and a sheep voting on
+1 416 425 1212 (DoD#0082)(eNTP)   |  what's for dinner.



RE: UCEProtect Level 3

2009-05-07 Thread Tomas L. Byrnes
Anyone who reads their description of it would be:

http://www.uceprotect.net/en/index.php?m=3s=5

Are you one of the ASes they blacklist on that list?



-Original Message-
From: Seth Mattinen [mailto:se...@rollernet.us]
Sent: Thursday, May 07, 2009 11:44 AM
To: nanog@nanog.org
Subject: Re: UCEProtect Level 3

Raleigh Apple wrote:
 Is anyone else out there aware that the UCEProtect Level 3 email
 blacklist blocks entire AS?



http://lmgtfy.com/?q=uceprotect+level+3



Re: UCEProtect Level 3

2009-05-07 Thread Suresh Ramasubramanian
On Fri, May 8, 2009 at 12:04 AM, Raleigh Apple rap...@rapidlink.com wrote:
 Is anyone else out there aware that the UCEProtect Level 3 email blacklist
 blocks entire AS?


Is there anyone out there aware of any significant (or larger than
'man and his dog on a DSL') mail provider using UCEPROTECT?

-- 
Suresh Ramasubramanian (ops.li...@gmail.com)



RE: UCEProtect Level 3

2009-05-07 Thread Skywing
I seem to recall that Mailstreet/MXlogic firewalls off (not rejects at SMTP 
level) any AS listed in UCEProtect, at least of about a year or so ago.

- S

-Original Message-
From: Suresh Ramasubramanian ops.li...@gmail.com
Sent: Thursday, May 07, 2009 22:25
To: Raleigh Apple rap...@rapidlink.com
Cc: nanog@nanog.org nanog@nanog.org
Subject: Re: UCEProtect Level 3


On Fri, May 8, 2009 at 12:04 AM, Raleigh Apple rap...@rapidlink.com wrote:
 Is anyone else out there aware that the UCEProtect Level 3 email blacklist
 blocks entire AS?


Is there anyone out there aware of any significant (or larger than
'man and his dog on a DSL') mail provider using UCEPROTECT?

--
Suresh Ramasubramanian (ops.li...@gmail.com)



Re: UCEProtect Level 3

2009-05-07 Thread Suresh Ramasubramanian
On Fri, May 8, 2009 at 11:00 AM, Skywing skyw...@valhallalegends.com wrote:
 I seem to recall that Mailstreet/MXlogic firewalls off (not rejects at SMTP 
 level) any AS listed in UCEProtect, at least of about a year or so ago.

 - S


I would be very surprised indeed if MX Logic did something like that.

srs