There have been similar posts on NANOG indicating xxx.osirusoft.com are returning all 127.0.0.2. Apparently they are under a massive DDOS attack....

Rick Rountree
Sr Network Admin
Dundee.Net

At 08:38 PM 8/26/2003, you wrote:
FYI, looks like Joe Jared (of Osirusoft) is finally hanging it up.

Bill
----- Original Message -----
From: "James Miller" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 26, 2003 4:07 PM
Subject: RE: [SAtalk] OSIRUSOFT -- should they be used any more?


> Update OSIRUSOFT issue: > > I decided to go ahead and call Joe Jared since now our primary mail server > is now listed as well and I can't get mail to him. > > ################ > ----- The following addresses had permanent fatal errors ----- > <[EMAIL PROTECTED]> > (reason: 553 5.3.0 <[EMAIL PROTECTED]>... Mail from nitwit spammer > 198.83.204.156 refused see > http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=198.83.204.156) > > ----- Transcript of session follows ----- > ... while talking to relays.osirusoft.com.: > >>> MAIL From:<[EMAIL PROTECTED]> SIZE=1524 > <<< 553 5.3.0 <[EMAIL PROTECTED]>... Mail from nitwit spammer > 198.83.204.156 refused see > http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=198.83.204.156 > 501 5.6.0 Data format error > #################### > > I find this quite silly, I scanned our mail logs and I can say with > certainty that spam is/has not been coming from our site. > > Anyway, when I called Mr. Jared, he stated that everyone needs to stop using > Osirusoft and that he's going to be shutting the service down. And I got > the impression that he's soon going to get his point across by blacklisting > the world. > > I'm not alone in this problem, a check on google groups will tell all. > > http://groups.google.com/groups?dq=&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=off&fra > me=right&th=b43eeebc8f1bd08c&seekm=3LN2b.9658%24Ly2.1506055%40cletus.bright. > net#link1 > > > If you are using osirusoft to pull the Spamhaus SBL, and announcement was > > made by Steve Linford to stop using Osirusoft several weeks ago." > > SpamAssassin is used by thousands of admins and the use of Osirusoft needs > to be reconsidered, especially with a new release coming out soon. I would > appreciate any comments about this. > > > Regards, > Jim > > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of James > Miller > Sent: Tuesday, August 26, 2003 4:33 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] OSIRUSOFT -- should they be used any more? > > > With all the trouble OSIRUSOFT is having, is it time to stop using them? > > As of 12:40 this afternoon our mail server stopped accepting mail from our > main web server because it was listed on osirusoft. How I don't know since > it doesn't run an SMTP server -- it's protected by a dmz firewall which > allows 80-443 in, smtp 25 to our internal mail server and >1024 out to the > world, it's completely upto date, runs Norton virus scanner and tcpdump over > 3 hrs only shows it sending messages to our internal mail server. It's hard > coded to send billing, cancellation, reactivation messages to exactly one > mail server on the inside of our firewall. > > news.admin.net-abuse.email is filled with messages/complains about them from > companies complaining that Joe Jared (founder of osirusoft and spews) isn't > responding to request to find out why their listed and how to get off the > list. > > Also, it seems they are facing several law suites from several large > corporation. > > And to add to it, they are (have been since Friday) under a DDoS attack, > their web site is down, mail is not flowing to them (because of the attack I > assume) and I don't know what to do to get us off the list before our class > 'C' networks get added short of calling him or sending a fax. But I've been > told that he will permanently black list anyone who calls or faxes him > directly. > > I have complete removed all osirusoft check in SA and Sendmail. It may be > time to completely remove them from SA all together. > > > Regards, > Jim > > > > > James Miller, MCSE > Network Administrator > Simutronics Corporation > www.play.net > 636.946.4263 x113 > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: VM Ware > With VMware you can run multiple operating systems on a single machine. > WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines > at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk >

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to