Re: [Declude.JunkMail] CBL Blocks

[Matt]

T-Mobile forces you to relay through their own SMTP servers, and they leak a lot of spam.  CBL will only list things that look like dynamic IP's or have no reverse DNS entry.  The T-Mobile servers give a bogus HELO of mailrelay.t-mobile.com but their actual reverse DNS entries show up as something like m6f095e42.tmodns.net.  That particular server is currently SpamCopped and has been for a total of 34 full days out of the last 116:     http://www.senderbase.org/search?searchString=66.94.9.111  I don't believe that CBL wants to tag their servers as they are generally not in favor of listing real mail servers/relays, but T-Mobile has done a really bad job of managing their network and the spam problem.  The end result is that CBL, SpamCop, PSBL and others will regularly tag their servers. I am afraid that the only solution here would be to give credit to the T-Mobile IP's.  CBL might consider excluding their IP's if you contacted them, but SpamCop seems to think that it is a good thing to regularly list AOL's own servers for a smattering of spam out of tens of millions of messages a day.  In fact I did contact SpamCop about this issue last year and the reply was that AOL's server was listed because it sent spam (almost a quote).  PSBL and SENDERDB have terrible issues with this sort of thing as well. Matt Orin Wells wrote: I received a contact from one of our customers who discovered an e-mail from within his own domain had been stuck into the spam box.  When I investigated I found out that it had been tagged by the CBL test.  Looking further if found the email address was on three different black lists.  OK, but the problem is this is a dynamic address belonging to T-Mobile I suspect.  This implies that some dynamic customer had connected while infected by a piece of spam software and got the IP logged.  Now anyone connecting and receiving the address will be blacklisted. How do you handle this sort of thing? The IP address, in case anyone is curious, is 208.54.14.65.  The CBL probe says it was de-listed on 6/23/2005 but re-listed on 7/30/2005 (yesterday).  There are two other services where it is listed - DNSBLNETAUTI (DNSBLNET Australia pointing back to cbl_abuseat.org) and SBL-XBL pointing back to Spamhaus.org. Is anyone using such services (T-Mobile - may be assigned to Blackberry communications) where dynamic IP assignment is the rule just at the mercy of whoever got it earlier?  Is it even worth the effort to attempt to get the addresses de-listed?  Should the ISP service be advised when one of their IP addresses is discovered as listed?  I suppose it is too much to expect the black lists to be able to recognize dynamic addresses and just not bother to list them or at least set them on some timer to release after a bit. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================