I have been off this list for awhile, so I am not sure if this has been
covered.

I am very confused as to what RCVD_IN_DYNABLOCK does. I have been
looking at my logs and it appears that a lot of my clients email is
being tagged with RCVD_IN_DYNABLOCK.


Most of my clients access the internet via Comcast Cable Modem or DSL.
Is the purpose of DYNABLOCK to record client IP's (i.e. IP addresses of
the clients Cable/DSL connection) that are known to be the source of
SPAM (even though they are only relaying to an SMTP box via Outlook or
something)? So if some client computer got infected with a worm and it
started mailing out a bunch of crap (through the ISP's relay server) the
client IP would be tagged, and NOT the ISP's relay server.


If this is the case, does DYNABLOCK flush out its database of bad client
IP's?

I don't know if I agree with the logic of how DYNABLOCK works.
Obviously, it causes me a headache trying to explain to my clients why
their mail was not delivered. I'll never get an answer from
dynablock.easynet.nl as to why my clients IP's were tagged as BAD. This,
combined with the DoS attacks on RBLs (which in turn cause the RBLs to
return false positives), is starting to make me very weary about using
RBL's - everytime I turn my back I am getting bit in the ass.

Why would we blacklist client IP's who relay mail through an ISP's mail
server. Most ISP's are responsible enough to track down serious spammers
on their network. And, YES, every once in awhile, a DSL client computer
gets infected and starts sending spam - but it is quickly contained.

Thoughts?
John


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to