Re: Caution - access to Spamhaus data-feed may be improperly configured: 204.89.241.253

2011-08-19 Thread Benny Pedersen
On Sat, 20 Aug 2011 01:27:41 +, Michael Scheidell wrote: Bullshit 3. There isn't even a dns server on this host. Resolved mxtools.com to 209.44.121.50 [mxtools.com has 1 MX record mail.mxtools.com.(10)] is mxtools.com the envelope sender domain ? -- Michael Scheidell, CTO SECNAP Netwo

Re: Theories on blocking OUTGOING spam

2011-08-19 Thread Lawrence @ Rogers
On 16/08/2011 7:32 PM, Marc Perkel wrote: When email is coming fast from an account I start tracking the number of bad recipients and if the number of bad recipients is high it's probably spam. I also have restrictions on valid domains the from has to match, I look for URIBLs, high SA score

Re: Caution - access to Spamhaus data-feed may be improperly configured: secnap.com.ionspam.net.

2011-08-19 Thread Noel Butler
On Sat, 2011-08-20 at 02:04 +, John Levine wrote: > MXTools is real, I know some of the people who work there. > > Dunno why they'd think you're querying the Spamhaus lists if you > aren't -- it is my impression that Spamhaus looks at the query logs > and passes along IPs that are close to be

Re: Caution - access to Spamhaus data-feed may be improperly configured: secnap.com.ionspam.net.

2011-08-19 Thread Michael Scheidell
On 8/19/11 10:04 PM, John Levine wrote: and passes along IPs that are close to being rate limited. oh, and we aren't a huge company, less then 50 people here, and get less then, well, maybe 10,000 emails (attempts) a day, 95% are rejected due to unknown user. guess they spam enough people a

Re: Caution - access to Spamhaus data-feed may be improperly configured: secnap.com.ionspam.net.

2011-08-19 Thread Michael Scheidell
On 8/19/11 10:04 PM, John Levine wrote: MXTools is real, I know some of the people who work there. Dunno why they'd think you're querying the Spamhaus lists if you aren't -- it is my impression that Spamhaus looks at the query logs and passes along IPs that are close to being rate limited. R'

Re: Caution - access to Spamhaus data-feed may be improperly configured: secnap.com.ionspam.net.

2011-08-19 Thread John Levine
MXTools is real, I know some of the people who work there. Dunno why they'd think you're querying the Spamhaus lists if you aren't -- it is my impression that Spamhaus looks at the query logs and passes along IPs that are close to being rate limited. R's, John

Re: Caution - access to Spamhaus data-feed may be improperly configured: 204.89.241.253

2011-08-19 Thread Michael Scheidell
On 8/19/11 9:27 PM, Michael Scheidell wrote: Bullshit 3. There isn't even a dns server on this host. noop, no dns server here on this ip. sockstat -4p53 USER COMMANDPID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS mx1# ps -ax | grep named 37956 p0 S+J0:00.00 grep named

Re: Caution - access to Spamhaus data-feed may be improperly configured: 204.89.241.253

2011-08-19 Thread Michael Scheidell
On 8/19/11 9:27 PM, Michael Scheidell wrote: Bullshit 3. There isn't even a dns server on this host. and, checking to see if this is a joe job: considering spf failed: they can't even get THEIR DNS right, and they think I have my DNS set wrong? lusers. Received: from smtp.mxtools.com (smtp

Re: Caution - access to Spamhaus data-feed may be improperly configured: 204.89.241.253

2011-08-19 Thread Michael Scheidell
Bullshit 3. There isn't even a dns server on this host. -- Michael Scheidell, CTO SECNAP Network Security -Original message- From: MXTools Spamhaus Team To: Michael Scheidell Sent: Sat, Aug 20, 2011 01:20:11 GMT+00:00 Subject: Caution - access to Spamhaus data-feed may be improperly c

Re: Caution - access to Spamhaus data-feed may be improperly configured: secnap.com.ionspam.net.

2011-08-19 Thread Michael Scheidell
Bullshit. There is no ipaddress with a rdns below. Bullshit 2. We arnt querying spamhaus servers. Isnt this jyst a spam scam ? Show me packet traces. -- Michael Scheidell, CTO SECNAP Network Security -Original message- From: MXTools Spamhaus Team To: Michael Scheidell Sent: Sat, Au