Hello, <r...@gmx.co.uk> wrote:
>Subject: Re: posfix rejected from google server > >On Fri, Mar 04, 2011 at 03:29:08PM +0100, kapetr wrote: >> first I have to say: the problem with home/dynamic IP ranges, >> business accounts, ... and therefore the need of using relay of >> my ISP in my case I have well understand and I do it so. >> >> What I'm interesting for is still the: >> >> > http://cbl.abuseat.org/lookup.cgi?ip=85.71.234.108+&.submit=Lookup >> > >> > >> > says -as you wrote: >> > IP Address 85.71.234.108 is listed in the CBL. It appears to be >> > infected with a spam sending trojan or proxy. >> > It was last detected at 2011-03-01 07:00 GMT (+/- 30 minutes), >> >> So the question is, how I get into such list and why am I >> recognized as " infected with a spam sending trojan or proxy" >> and not just "disabled while dynamic IP range". > >Did you read the rest of that page, and these links? >http://cbl.abuseat.org/nat.html >http://cbl.abuseat.org/advanced.html Of course I had read that. But the problem is - all the text is based on the assumption, then on my system/LAN/... is spambot - and I believe this is not my case - see below. > >> I have first time used Postfix (after install) at 2011-03-01 >> 06:00 >> >> GMT >> >> And at 2011-03-01 06:44 GMT I have try send test e-mail to my >> <kenap.i...@gmail.com>, which was rejected back. >> >> So my conclusion is, that my only "crime" was this action: >> attempt >> >> of send mail to Goggle SMTP server from homeIP address. The >> Google >> >> server probably immediately have send report of that to >> cbl.abuseat.org, which has it rated as I would be "infected with >> a >> >> spam sending trojan or proxy", which is not accurate - NOT >> correct. >> > >I doubt your conclusion. IIUC CBL detects spam based on content and >I doubt your conclusion. IIUC CBL detects spam based on content and >ONLY when it hits a spamtrap address; that is, an address which has >never been used for legitimate mail and was harvested by spammers. > It can not be so. My "from:" address used by these tests of fresh Postfix installation I have and use many years - so it fit not in yours definition of "spamtrap adress". And there was nothing/nobody sending email - how shows the time reported by cbl.abuseat.org - this was only this one accident which exactly corresponds with the test mail send via the fresh installed Postfix. After change Posfix config to "relayhost" - no new accidents was reported. That is IMHO good evidence, that there is no spambot on my system. (+ i have add iptables rule for outgoing SMTP - to check SYN packet count. Nothing suspect.) And the content of email? See, what googles server reports in error message - there is only hint of disallowed connection from my IP and recommendation to use ISPs server. No spam. >I further highly doubt any link between Gmail and CBL exists. O course - it must exist - direct or indirect. Or how do you thing, that are such list filled ? Someone must report it. And there was communication only between my computer and Googles server. (And I did not report :-) That's why I thing: > >> Maybe cbl.abuseat.org simple things, that if someone try to send >> emails from MTA on homeIP, then it must be spamer or infected >> system >> >> ?! ... after Googles server has asked about my IP address by abuseat.org. >Also it's not really on topic here. If you'll indulge a shameless >self-promotion, this would be quite on topic on this list, which I >co-manage: >http://spammers.dontlike.us/ >We do have a CBL representative who subscribes and sometimes posts. >- -- >Offlist mail to this address is discarded unless >"/dev/rob0" or "not-spam" is in Subject: header ?? I don't understand, what do you mean. Sorry my English - I'm not able to describe all as I would like - that's why I use only streamlined sentences. I work with Google translator. But to say, that I do "shameless self-promotion" ? This is too much, isn't ? --kapetr
