andydills Posted March 9, 2004 Share Posted March 9, 2004 Hello, I'm the administrator of Xecunet. Spamcop is currently listing 216.127.136.199, 216.127.136.203, 216.127.136.204, 216.127.136.223, 216.127.136.136.224 in bl.spamcop.net. This perplexes me. We're very much white-hat, and we're not listed in any other black lists. When I visit your website, I'm not able to retrieve any sort of evidence supporting why we were listed. Given our mail architecture, it would be trivial for me to renumbers these mail servers (they aren't referenced directly by anything except an L4 loadbalancer). However, that's a band-aid, not a solution. I'd much rather get de-listed than renumber; however, our 10k+ customers are justifiably pissed, so I'll do what I need to do. Can somebody help me out? I know for a fact our mailservers are not spam sources, and I suspect this is all regarding errant bounce messages. Thanks, Andy Link to comment Share on other sites More sharing options...
Miss Betsy Posted March 9, 2004 Share Posted March 9, 2004 You might try reading the information here (especially if it is bounce messages) though there weren't any mention of spamtraps. http://www.spamcop.net/fom-serve/cache/298.html Miss Betsy Link to comment Share on other sites More sharing options...
andydills Posted March 9, 2004 Author Share Posted March 9, 2004 Thanks, but I read that before I posted. However, without evidence of the reported spam, and without a timestamp to go on to determine the "48 hour period", there's absolutely nothing to move forward with. Thanks, Andy Link to comment Share on other sites More sharing options...
turetzsr Posted March 9, 2004 Share Posted March 9, 2004 Hi, Andy! ...Please try dropping a note to deputies <at > admin.spamcop.net. The helpful SpamCop.net deputies may be able to assist you. Link to comment Share on other sites More sharing options...
Spambo Posted March 9, 2004 Share Posted March 9, 2004 Hello, I'm the administrator of Xecunet. Spamcop is currently listing 216.127.136.199, 216.127.136.203, 216.127.136.204, 216.127.136.223, 216.127.136.136.224 in bl.spamcop.net. This perplexes me. We're very much white-hat, and we're not listed in any other black lists. When I visit your website, I'm not able to retrieve any sort of evidence supporting why we were listed. Given our mail architecture, it would be trivial for me to renumbers these mail servers (they aren't referenced directly by anything except an L4 loadbalancer). However, that's a band-aid, not a solution. I'd much rather get de-listed than renumber; however, our 10k+ customers are justifiably pissed, so I'll do what I need to do. Can somebody help me out? I know for a fact our mailservers are not spam sources, and I suspect this is all regarding errant bounce messages. Thanks, Andy The SCBL output pages aren't updated in real time. It sometimes takes 30 min. to an hour to be fully updated. Give it another 30 minutes or so and there will probably be an update. You might check your abuse[at] & postmaster[at] inboxes for spam reports, if you haven't done so recently. Link to comment Share on other sites More sharing options...
StevenUnderwood Posted March 10, 2004 Share Posted March 10, 2004 Looking at those addresses right now, I don't see any of them on the bl. Looking at senderbase, both the 199 and 204 addresses appear very recent and both have a large volume change over the average. Are these new hosts? There was talk of a change recently which listed large volume coming from new hosts immediately, even without reports. You will need to contact the deputies as mentioned elsewhere to get this looked at. Or have you already, which is why I am not seeing them on the list. Link to comment Share on other sites More sharing options...
petzl Posted March 10, 2004 Share Posted March 10, 2004 Can somebody help me out? I know for a fact our mailservers are not spam sources, and I suspect this is all regarding errant bounce messages.Can somebody help me out? I know for a fact our mailservers are not spam sources, and I suspect this is all regarding errant bounce messages. SpamCop does not report bounce messages and rejects any attempt for one to use SpamCop for this purpose. A person circim navigating SpamCop for this purpose is likley to be fined and or expelled for doing so http://www.spamcop.net/fom-serve/cache/14.html You would have a security problem or be a spam source if listed by SpamCop However I cannot see any of the IP's as presently listed? A couple have been sending spam to spamtraps? So unless spamcop is silently reporting bounces? Which SpamCop should not be! SpamCop can detect bounce messages and disregard them?) 216.127.136.199 216.127.136.203 Been detected sending mail to spam traps 216.127.136.204 Been detected sending mail to spam traps 216.127.136.223 Link to comment Share on other sites More sharing options...
Ellen Posted March 10, 2004 Share Posted March 10, 2004 Andy got in touch with us and I think we have the problem under control ... Link to comment Share on other sites More sharing options...
yourbuddy Posted March 10, 2004 Share Posted March 10, 2004 Ellen ... That's great, but was one of their servers compromised in any way, or was there an "error" of any kind at all (on the part of SpamCop)? Postings here generally assume that SpamCop is "usually" right. Perhaps an answer may help with answering future situations. Link to comment Share on other sites More sharing options...
Ellen Posted March 10, 2004 Share Posted March 10, 2004 um I can't remember -- I am running thru 50-70 emails/IPs a day and if it didn't happen in the last 5 minutes it's been erased from mind -- it was probably anti-spam/virus autoresponders to spamtraps or something like that ... Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.