Jump to content

IPv6 or what ?


michaelanglo
 Share

Recommended Posts

Assuming that opaltelecom.net is a forwarder as it is part of your mailhosts, both 207.46.100.253 and 2a01:111:f400:7c09:0:0:0:183 belong to hotmail/outlook.com (aka microsoft). So it would appear that the proper source is reporting correctly.

But if Microsoft is trusted shouldn't mail.sccky.edu be reported as the spam source rather than 2a01:111:f400:7c09:0:0:0:183 breaking the chain ?

Link to comment
Share on other sites

But if Microsoft is trusted shouldn't mail.sccky.edu be reported as the spam source rather than 2a01:111:f400:7c09:0:0:0:183 breaking the chain ?

X-Originating-IP: [206.162.175.122] Canada abuse[ at ]telus.com : CERT first[ at ]ewa-canada.comSpamCop often just reports the email server (which is good)Spammer often fake IP's
Link to comment
Share on other sites

X-Originating-IP: [206.162.175.122] Canada abuse[ at ]telus.com : CERT first[ at ]ewa-canada.comSpamCop often just reports the email server (which is good)Spammer often fake IP's

Good call. It has been a while since I've had to manually analyze headers in order to figure out the appropriate reporting address, and the grey matter that works out the most trustworthy piece of info is at risk of wasting away!

Link to comment
Share on other sites

Good call. It has been a while since I've had to manually analyze headers in order to figure out the appropriate reporting address, and the grey matter that works out the most trustworthy piece of info is at risk of wasting away!

SpamCop send reports to wrong ISP because of "legacy" issues where someone to lazy or don't know how or even spammer in 2004 changed their abuse address!

Reports routes for 206.162.175.122:
routeid: 10923202 206.162.128.0 - 206.162.191.255 to: abuse[at]globetrotter.net

Administrator interested in all reports

6/8/2004, 1:18:39 PM +1000

[Note added by 24.78.154.2, 24.66.94.142 (S010600045a22c670.ss.shawcable.net)]

Dale is wrong and was probably confused with our IP range.

The real thing is

66.110.128.0 - 66.110.159.255

207.134.0.0 - 207.134.255.255 exclusion of 207.134.74.0 - 207.134.95.255 to abuse[at]psi.net or abuse[at]telus.net

142.169.0.0 - 142.169.255.255

206.162.128.0 - 206.162.191.255

Sorry for the inconvenience it might have caused you.

Regards

Claude Labonté

Claude.labonte[at]telus.com

418 722 5501

-------------------------------------------------------------------

Can you please alter the contact email addresses for the following =

ranges to abuse[at]globetrotter.net?

66.110.x.x

207.134.x.x

142.169.x.x

206.162.x.x

Sincerely,=20

Dale

Internet Abuse Team

National Internet Services Support=20

TELUS Communications=20

http://www.telus.com/aup

Email: abuse[at]telus.com

-----------------------------------------------------------------------------------

-----Message d'origine-----

De : SpamCop/Richard [mailto:deputies[at]admin.spamcop.net]

Envoyé : 4 juin, 2004 03:02

À : Labonte, Claude

Objet : Re: Reports

Hi Claude,

We received the following email from Telus on June 1. This is why you are

receiving reports.

Richard

Please include all previous correspondence with replies

Edited by petzl
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...