(OT) Mail got blocked because of SORBS/DYNABLOCK

From: Reuben D. Budiardja (techlist_at_voyager.phys.utk.edu)
Date: 03/31/04

  • Next message: Alexander Lazarevich: "max LV size in RHEL3 kernel 2.4?" 
    To: redhat-list@redhat.com
Date: Wed, 31 Mar 2004 15:39:08 -0500

    Hi all,
    Sorry if this is a little bit OT, but I know some people is knowledgeable
    about this.

    I have a user who's trying to send email and found out the email got blocked
    by spamassasin (I think), with the following test:
    tests=RCVD_IN_DYNABLOCK,RCVD_IN_SORBS ver=2.63

    That user use my SMTP server, with authentication, to relay the mail. After
    googling a bit, I figured out that the first test is just and implementation
    of RBL, and the second probably check it with the SORBS database.

    I know my SMTP server is clean, and not listed in RBL or SORBS database (I
    checked that).
    But when I check the originating IP of this user (he uses his own ISP) here:

    http://www.dnsbl.us.sorbs.net/cgi-bin/lookup?js&IP=

    I found entry in the "Dynamic IP Space " section. Looks like his ISP, or even
    his IP block is in the list of SORBS.
    And this
    http://mail-abuse.org/cgi-bin/lookup

    shows his originating IP in the DUL list (whatever that is).

    But the funny thing is, this user has another email account using another SMTP
    server, and when he send mail from that account it does not trigger the
    RCVD_IN_DYNABLOCK rule. So I don't quite understand it.

    So my question basically, does changing SMTP server for his account (using his
    ISP SMTP server for example) help fixing this problem? If yes, why? if the
    rule looks at the originating IP instead of the SMTP, any SMTP server that he
    uses will still trigger the rule, won't it ? And why does his other account
    (with different SMTP) does not trigger that some DYNABLOCK rule?

    Any help on this will be greatly appreciated.

    RDB 

    -- 
Reuben D. Budiardja
Department of Physics and Astronomy
The University of Tennessee, Knoxville, TN
---------------------------------------------------------
"To be a nemesis, you have to actively try to destroy 
something, don't you? Really, I'm not out to destroy 
Microsoft. That will just be a completely unintentional 
side effect."
                 - Linus Torvalds -
-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Alexander Lazarevich: "max LV size in RHEL3 kernel 2.4?"

    Relevant Pages

    • Error 0x800CCC0B BUSY Server or maildrop is busy when sending email
      ... I've set him up with a dial-up account with the same ISP that I use, ... OE reports no errors but McAfee reports a non-specific ... The SMTP server does not require ...
      (microsoft.public.windows.inetexplorer.ie6.outlookexpress)
    • Re: Ask EU mail sending message
      ... Once I had finished deciding what I would read in umra and employing Mr Read, we compared all our account settings and found that somehow Mike's SMTP was set to use a password and mine wasn't. ... The reason you may not have been aware before might be that you always connected through the ISP that owns that SMTP server and thus the password was not required. ... email jane at cloth and clay dot co dot uk ...
      (uk.media.radio.archers)
    • Re: 0x800CCC6F cant send mail but can receive!
      ... Unfortunately most ISP techs are not that well informed about ... 'Port 25 Blocking' ... substitute the SMTP server belonging to that connection. ... email account correctly - I`m currently on holiday in Greece from the ...
      (microsoft.public.windows.vista.mail)
    • Re: Compuserve SMTP
      ... I use the SMTP server for my Yahoo! ... authentication and because my ISP block outgoing connections on port 25, ... Had a CS account for years and done this with many ISP's ADSL and dial-up ... via a Wanadoo connection, but they would not allow access to their server ...
      (uk.telecom.broadband)
    • Re: Ask EU mail sending message
      ... Once I had finished deciding what I would read in umra and employing Mr Read, we compared all our account settings and found that somehow Mike's SMTP was set to use a password and mine wasn't. ... The reason you may not have been aware before might be that you always connected through the ISP that owns that SMTP server and thus the password was not required. ... If so it'd be worth finding the address of the SMTP server for your new French ISP and moving over to that. ...
      (uk.media.radio.archers)