Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Suresh Ramasubramanian
As long as the blocking is targeted and responsibly implemented I don't have any particular issues More than one large corporation has hotel California style blocks though --srs > On 01-Jun-2016, at 10:43 AM, Shane Clay wrote: > > Our block of this /24 will only be temporary. We'll remove it

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Shane Clay
Our block of this /24 will only be temporary. We'll remove it when we've assessed the amount of spam (in fact, the only concern we really have is these Cryptolocker downloaders) has reduced to a level our clients will be happy with. We are rejecting email with a 500 error. The sender will be awa

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Suresh Ramasubramanian
Having spent about 14 years doing postmaster / abuse / spam architecture for a hk based ISP before my current job, I can relate to that "wider subnet blockages" thing. Beyond that - I wonder just how many people 1. Have as many metrics as they think to accurately determine fp rates 2. Listen

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Mark Foster
That's ok Suresh. We down-under are frequently victim of wider subnet blockades due to American (in particular, as a party we communicate with a lot) prejudices about larger subnets with smaller chunks routed to other APNIC member countries such as China and Korea. So I suppose it's all fair :

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Shane Clay
We're Australian and the impact is low. In fact over the past 7 days, it would had been zero false positives. Even if it wasn't zero, a few lost emails is better than a whole heap of crypto in our view. Seems to also be one our clients share. Regards, Shane Clay Caznet Solutions 08 8464 0052 O

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Suresh Ramasubramanian
With multiple million legitimate users of one of the largest broadband providers in the USA also mailing through the /24. Brilliant, I must say. You must enjoy hearing false positive reports from your users. --srs > On 01-Jun-2016, at 8:02 AM, Shane Clay wrote: > > We're seeing the same a

Re: [mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Shane Clay
We're seeing the same and have also blocked that /24. Regards, Shane Clay|Director, Senior Engineer www.caznet.com.au Phone08 8464 0052 211 / 147 Pirie Street, Adelaide SA 5000 -Original Message- From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Benoit Panizzon

Re: [mailop] signup form abuse

2016-05-31 Thread Dave Pooser
On 5/31/16, 8:57 AM, "mailop on behalf of Vick Khera" wrote: > >On Fri, May 27, 2016 at 1:57 PM, Michael Peddemors > wrote: > >> Putting your business card in a bowl to win a prize is definitely not >>giving permission to get on a mailing list ;) > >I for one pretty much expect that I'll be put o

[mailop] Massive Spamrun from Cox Net: 68.230.241.0/24

2016-05-31 Thread Benoit Panizzon
Hello At the moment we see a very large amount of emails containing Microsoft Office Documents containing malware, all originating from IP Addresses in the Range: 68.230.241.0/24 We therefore blocked that range. Anyone else? Maybe a Cox.Net Email Admin reading this list? -Benoît Panizzon- -- I

Re: [mailop] signup form abuse

2016-05-31 Thread Vick Khera
On Fri, May 27, 2016 at 1:57 PM, Michael Peddemors wrote: > Putting your business card in a bowl to win a prize is definitely not > giving permission to get on a mailing list ;) > I for one pretty much expect that I'll be put on a list. I'm sure a lot of other folk do, too. _

Re: [mailop] Excluding Message-ID from DKIM Signature

2016-05-31 Thread Vick Khera
On Fri, May 27, 2016 at 11:26 AM, Joel Beckham wrote: > Thanks, Vick. I'm curious, what initially lead you to exclude the > message-id from your signature? > We sign in our application, and let the MTA throw in the Message-ID. Always did it that way. I also let the MTA insert the required Date h

Re: [mailop] Incorrect listing at Proofpoint

2016-05-31 Thread Neil Schwartzman
hi Rob - please try using https://support.apple.com/en-us/HT204137 as a POC for iCloud. > On May 31, 2016, at 3:15 AM, Rob N ★ wrote: > > We're seeing a lot of our mail being deferred due to being listed on the > Proofpoint blacklist. A typical respo

Re: [mailop] Incorrect listing at Proofpoint

2016-05-31 Thread Michelle Sullivan
Rob N ★ wrote: We haven't been able to get hold of anyone at Proofpoint - no obvious support service for non-customers and we haven't been able to get anyone on the phone. Does anyone have a contact they can put me in touch with? Replied offlist. -- Michelle Sullivan http://www.mhix.org/

[mailop] Incorrect listing at Proofpoint

2016-05-31 Thread Rob N ★
We're seeing a lot of our mail being deferred due to being listed on the Proofpoint blacklist. A typical response to MAIL FROM: 450 4.7.0 Deferred - see https://support.proofpoint.com/dnsbl-lookup.cgi?ip=66.111.4.237 The major site this is affecting delivery to is iCloud, but there are other sm