[vchkpw] Inter7 listed in SORBS and SpamHaus?
http://www.rulesemporium.com/cgi-bin/uribl.cgi?domain0=64.119.194.44;bl0=0 Snipped from my spamassassin report. I found a message from Jeremy Kitchen my spam folder. Content analysis details: (5.0 points, 4.0 required) pts rule name description -- -- 0.1 FORGED_RCVD_HELO Received: contains a forged HELO 5.0 URIBL_SBL Contains an URL listed in the SBL blocklist [URIs: inter7.com] -- Dave Goodrich Systems Administrator http://www.tls.net Get rid of Unwanted Emails...get TLS Spam Blocker!
Re: [vchkpw] Inter7 listed in SORBS and SpamHaus?
http://www.rulesemporium.com/cgi-bin/uribl.cgi?domain0=64.119.194.44;bl0=0 Snipped from my spamassassin report. I found a message from Jeremy Kitchen my spam folder. [snip] That's not inter7's IP, at least not the one the list comes from. My headers from your message show inter7 sent their message from 68.78.194.78, which is in an ameritech.net (now SBC) DSL block. The IP you list most certainly *is* listed, but ARIN says it's Iway broadband: [EMAIL PROTECTED] ~]$whois 64.119.194.44 [Querying whois.arin.net] [whois.arin.net] OrgName:iWay Broadband, Inc. OrgID: IWBB Address:6885 Flanders Drive Address:Suite G City: San Diego StateProv: CA PostalCode: 92121 Country:US Maybe there is some forging going on? Or possibly you got a misdirected bounce from somewhere? I see a spam score of -1.9 or so for this list, and no blacklist listings. -Bill * Waveform Technology UNIX Systems Administrator
Re: [vchkpw] Inter7 listed in SORBS and SpamHaus?
On Thursday 03 March 2005 11:57 am, Dave Goodrich wrote: http://www.rulesemporium.com/cgi-bin/uribl.cgi?domain0=64.119.194.44;bl0=0 Snipped from my spamassassin report. I found a message from Jeremy Kitchen my spam folder. Content analysis details: (5.0 points, 4.0 required) pts rule name description -- -- 0.1 FORGED_RCVD_HELO Received: contains a forged HELO probably due to the fact that our HELO is 'mail.inter7.com' but our reverse dns is adsl-68-78-194-78.dsl.rcfril.ameritech.net 5.0 URIBL_SBL Contains an URL listed in the SBL blocklist [URIs: inter7.com] the server that inter7.com's website is listed on spamhaus (not due to us, I assure you) -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail GnuPG Key ID: 481BF7E2 ++ jabber:[EMAIL PROTECTED] pgpEKS7zEPPH8.pgp Description: PGP signature
RE: [vchkpw] Inter7 listed in SORBS and SpamHaus?
Bill Wichers wrote: http://www.rulesemporium.com/cgi-bin/uribl.cgi?domain0=64.119.194.44;bl0=0 Snipped from my spamassassin report. I found a message from Jeremy Kitchen my spam folder. [snip] That's not inter7's IP, at least not the one the list comes from. My headers from your message show inter7 sent their message from 68.78.194.78, which is in an ameritech.net (now SBC) DSL block. SURBL doesn't look at where the message came from, it looks at URIs within the message body and scores based on a lookup of the URIs it finds. Where the message originated from is unimportant, the key is what URL is the message advertising, the score was based on Jeremy's signature. SURBL rocks. If could only have one anti-spam tool, it would be SURBL. http://www.surbl.org/ DAve -- Dave Goodrich Systems Administrator http://www.tls.net Get rid of Unwanted Emails...get TLS Spam Blocker!
