Mailing List SIMS@mail.stalker.com Message #14385
From: Timothy Binder <lists@cyberthorn.net>
Subject: Re: RBL not catching spam?
Date: Mon, 29 Mar 2004 12:37:22 -0500
To: SIMS Discussions <SIMS@mail.stalker.com>
X-Mailer: Apple Mail (2.613)

On Mar 29, 2004, at 11:32 AM, Aron S. Spencer wrote:

When reporting a spam that got through to SpamCop, I noticed the following in the report:

82.166.26.217 listed in cbl.abuseat.org ( 127.0.0.2 )
82.166.26.217 is an open proxy

[snip]

Here is the log entry for the spam in question (it seems to be the case on about 1/2 the spam that gets through, so this is only a representative case):

23:45:33 3 SMTP-370(NOON-BL31RUG96I) Failed to verify. Real address is [82.166.26.217:4665]
23:45:41 2 SMTP-370([82.166.26.217]) {S.0001662901} received, 1169 bytes

They were apparently added to the DNSBLs after you received the spam. The addition was probably as a result of this spam.

<http://cbl.abuseat.org/lookup.cgi?ip=82.166.26.217&.submit=Lookup>

IP Address 82.166.26.217 was found in the CBL.

It was detected at 2004-03-29 05:00 GMT (+/- 30 minutes).

<http://dsbl.org/listing?82.166.26.217>

Status

IP: 82.166.26.217
State: Listed
Listed in unconfirmed (unconfirmed.dsbl.org): yes
Listed in singlehop (list.dsbl.org): yes
Listed in multihop (multihop.dsbl.org): no
Record last changed: 2004/Mar/29 07:39:39 UTC
Server identifies itself as: [82.166.26.217]
Reverse DNS identifies server as: 82-166-26-217.barak.net.il

History

2004/Mar/29 07:39:39 UTC          Listed in Unconfirmed (view message)
2004/Mar/29 07:39:39 UTC            Listed in Singlehop (view message)

Messages from this Host

2004/Mar/29  07:39:39 UTC (view message) socks4

I get this, too. Unfortunately, some of us get hit before the addresses are added to the DNSBLs we use. That's one of the reasons I use spamtraps as well.

HTH,
Tim
--
Timothy Binder                                Director, President-Elect
Philadelphia Science Fiction Society             <http://www.psfs.org/>
     Upcoming Guests: Warren Lapine, James Morrow, John Passarella

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster