Jump to content
Sign in to follow this  
michaelanglo

IPv6 or what ?

Recommended Posts

Assuming that opaltelecom.net is a forwarder as it is part of your mailhosts, both 207.46.100.253 and 2a01:111:f400:7c09:0:0:0:183 belong to hotmail/outlook.com (aka microsoft). So it would appear that the proper source is reporting correctly.

Share this post


Link to post
Share on other sites

Assuming that opaltelecom.net is a forwarder as it is part of your mailhosts, both 207.46.100.253 and 2a01:111:f400:7c09:0:0:0:183 belong to hotmail/outlook.com (aka microsoft). So it would appear that the proper source is reporting correctly.

But if Microsoft is trusted shouldn't mail.sccky.edu be reported as the spam source rather than 2a01:111:f400:7c09:0:0:0:183 breaking the chain ?

Share this post


Link to post
Share on other sites

But if Microsoft is trusted shouldn't mail.sccky.edu be reported as the spam source rather than 2a01:111:f400:7c09:0:0:0:183 breaking the chain ?

X-Originating-IP: [206.162.175.122] Canada abuse[ at ]telus.com : CERT first[ at ]ewa-canada.comSpamCop often just reports the email server (which is good)Spammer often fake IP's

Share this post


Link to post
Share on other sites
X-Originating-IP: [206.162.175.122] Canada abuse[ at ]telus.com : CERT first[ at ]ewa-canada.comSpamCop often just reports the email server (which is good)Spammer often fake IP's

Good call. It has been a while since I've had to manually analyze headers in order to figure out the appropriate reporting address, and the grey matter that works out the most trustworthy piece of info is at risk of wasting away!

Share this post


Link to post
Share on other sites

Good call. It has been a while since I've had to manually analyze headers in order to figure out the appropriate reporting address, and the grey matter that works out the most trustworthy piece of info is at risk of wasting away!

SpamCop send reports to wrong ISP because of "legacy" issues where someone to lazy or don't know how or even spammer in 2004 changed their abuse address!

Reports routes for 206.162.175.122:
routeid: 10923202 206.162.128.0 - 206.162.191.255 to: abuse[at]globetrotter.net

Administrator interested in all reports

6/8/2004, 1:18:39 PM +1000

[Note added by 24.78.154.2, 24.66.94.142 (S010600045a22c670.ss.shawcable.net)]

Dale is wrong and was probably confused with our IP range.

The real thing is

66.110.128.0 - 66.110.159.255

207.134.0.0 - 207.134.255.255 exclusion of 207.134.74.0 - 207.134.95.255 to abuse[at]psi.net or abuse[at]telus.net

142.169.0.0 - 142.169.255.255

206.162.128.0 - 206.162.191.255

Sorry for the inconvenience it might have caused you.

Regards

Claude Labonté

Claude.labonte[at]telus.com

418 722 5501

-------------------------------------------------------------------

Can you please alter the contact email addresses for the following =

ranges to abuse[at]globetrotter.net?

66.110.x.x

207.134.x.x

142.169.x.x

206.162.x.x

Sincerely,=20

Dale

Internet Abuse Team

National Internet Services Support=20

TELUS Communications=20

http://www.telus.com/aup

Email: abuse[at]telus.com

-----------------------------------------------------------------------------------

-----Message d'origine-----

De : SpamCop/Richard [mailto:deputies[at]admin.spamcop.net]

Envoyé : 4 juin, 2004 03:02

À : Labonte, Claude

Objet : Re: Reports

Hi Claude,

We received the following email from Telus on June 1. This is why you are

receiving reports.

Richard

Please include all previous correspondence with replies

Edited by petzl

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×