North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

An example

  • From: Roeland M.J. Meyer
  • Date: Fri Aug 11 03:51:27 2000

I post some negative messages about ORBS and RBL and look what
happens! Gee, isn't it co-incidental that my mailer is now
blocked?

It sounds like straight-up intimidation actions to me. If this is
the action of a responsible anti-spam fanatic then it is an even
greater indictment of the entire RBL/ORBS  movement.

The hostname is right, DNS is healthy, including my ORSC
root-zone servers, and I am running current sendmail with
anti-relay active.

Gee, maybe they're making a statement ...ya think?

That's alright, woods just hit my kill-file anyway >plonk<

But, this seriously indicates that this ORBS/RBL think is getting
way out of hand. Typical vigilante pattern.

> -----Original Message-----
> From: Mail Delivery Subsystem [mailto:[email protected]]
> Sent: Thursday, August 10, 2000 11:46 PM
> To: [email protected]
> Subject: Returned mail: Service unavailable
>
>
> The original message was received at Thu, 10 Aug 2000
23:46:01 -0700
> from peregrin.lvrmr.mhsc.com [199.108.175.234]
>
>    ----- The following addresses had permanent fatal
errors -----
> <[email protected]>
>
>    ----- Transcript of session follows -----
> ... while talking to mail.weird.com.:
> >>> HELO condor.lvrmr.mhsc.com
> <<< 550-You are not permitted to send mail from
> condor.lvrmr.mhsc.com[199.108.175.226].
> <<< 550-All SMTP connections have been blocked from that
address,
> <<< 550-possibly because it has been listed in one of the many
RBLs,
> <<< 550-or possibly because your DNS is broken or your
> hostname is wrong.
> <<< 550-
> <<< 550-Please forward this message to your own LOCAL
> postmaster and ask
> <<< 550-them to contact us regarding this issue.
> <<< 550-
> <<< [email protected][199.108.175.226]: Please contact
> <[email protected]>
> <<< 550-(via an unblocked server of course!) for exact
> details on why your
> <<< 550-mailer's connection was rejected.  You must include
> your IP number
> <<< 550 given above in order to receive an accurate answer.
> 554 <[email protected]>... Service unavailable
>
Reporting-MTA: dns; condor.lvrmr.mhsc.com
Received-From-MTA: DNS; peregrin.lvrmr.mhsc.com
Arrival-Date: Thu, 10 Aug 2000 23:46:01 -0700

Final-Recipient: RFC822; [email protected]
Action: failed
Status: 5.5.0
Remote-MTA: DNS; mail.weird.com
Diagnostic-Code: SMTP; 550-You are not permitted to send mail from condor.lvrmr.mhsc.com[199.108.175.226].
Last-Attempt-Date: Thu, 10 Aug 2000 23:46:19 -0700
--- Begin Message ---
I received the following today. I verified it myself.

-------------------------------------
[baa ~]$ dig txt 69.21.98.203.relays.orbs.org
<snip>
;; ANSWER SECTION:
69.21.98.203.relays.orbs.org.  1D IN TXT  "untestable -
Telstra/Saturn
NZ has  multiple open relays and has blocked the ORBS tester."
<big snip>

Both of these statements are blatent lies and completley
incorrect.
-------------------------------------



> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]]On Behalf Of
> Greg A. Woods
> Sent: Thursday, August 10, 2000 10:20 PM
> To: [email protected]
> Subject: RE: surge in spam email (fwd)
>
>
> [ On Thursday, August 10, 2000 at 18:05:41 (-0700), Roeland
> M.J. Meyer wrote: ]
> > Subject: RE: surge in spam email (fwd)
> >
> > The problem is ORBS black-holing Telstra/Optus. This
effectively
> > black-holes OZ and NZ, in their entirety. At that point, ORBS
> > credibility is toasted with me. I have also put three major
> > clients with AboveNet. ORBS's blackhole there, didn't sit
well
> > with me either. BTW, the current client is both in AboveNet
and
> > does traffic with OZ. ORBS has used up so many credibility
points
> > with me that I am now recommending against any affiliation
with
> > ORBS, in any way, shape, or means, whatsoever.
>
> Ah, no, ORBS doesn't "black-hole" anyone, nor block anyone.
>
> Only its users (such as myself) do such naughty things.
>
> > I'm not a spam fan, but ORBS is completely out of control and
> > renegade now. I can't condone such irresponsible behaviour. I
am
> > routing around the problem. If they had only blocked selected
> > subnets, that I can understand. But to block an entire
country,
> > for the sins of a few, is irresponsible. I have now endured
two
> > revenue hits because of ORBS ... there won't be a third ... I
> > can't afford it. The trust is broken and won't be restored.
BTW,
> > I am revisiting the RBL as well, however, they do seem a bit
more
> > responsible over there.
>
> I think if you look at the facts you'll find they're much
different
> than you've made them out to be.
>
> It just so happens that ORBS doesn't even list in their
*manual* list
> even the entirety of Telstra's net blocks!
>
> (not that it's possible to select a country, not even by
> their TLD, such
> as ".au", with a system like ORBS.....)
>
> --
> 							Greg A. Woods
>
> +1 416 218-0098      VE3TCP      <[email protected]>
> <robohack!woods>
> Planix, Inc. <[email protected]>; Secrets of the Weird
> <[email protected]>

--- End Message ---