On Wed, 01 Jun 2005 at 8:21:52 -0700, Todd Lyons wrote: > Tomasz Papszun wanted us to know: > > >> the IP of ns1.clamav.net, 69.61.68.204 is blacklisted by Spamhaus: > >> http://www.spamhaus.org/sbl/sbl.lasso?query=SBL27556 > >> causing interruptions in mail from/to clamav.net > >I was under the impression that Spamhaus listing is used only for > >checking SMTP clients' IP addresses (I use it myself), not for > >blocking DNS requests/replies also. Am I wrong? > > It's collateral damage. A spammer owns an IP or an IP block in the same > /23 as you. Spamhaus attempts to hurt the ISP by having other innocent > customers complain to them so much (and potentially switch away from > them, aka voting with their wallet) that the ISP boots the spammer. > Apparently, linuxlabs has been hosting a known spammer, namely Jeffery > Peters. It is not clear if this was intentional or not. You have a > couple of options: > 1) Get that ISP to boot Jeffery Peters and all sites created by him. > 2) Get a different ISP.
I haven't asked for that. I know what Spamhaus listing is for, but thanks for the explanation anyway :-) . > 3) Temporarily move your mail to a different machine Seems I wasn't clear enough. No clamav-related mail traverses that machine, AFAIK. It's just a DNS server. That's why I asked whether any party uses Spamhaus listing to blocking DNS-related packets or ignoring DNS replies coming from a listed IP address. > (Spamhaus listings don't affect dns operation, so dns will continue to > work properly). This is what I wanted to know - thank you. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html
