> <aaaaaa@aaaaa.com>: host mail.aaaaaa.com[000.000.000.000] said: 554 Your
> host 193.252.22.20 was found in the DNS Blacklist at dnsbl.sorbs.net (in
> reply to MAIL FROM command)
sur sorbs.net :
> Netblock: 193.252.22.0/27 (193.252.22.0-193.252.22.31)
> Record Created: Fri May 6 08:12:34 2005 GMT
> Record Updated: Fri May 6 08:12:34 2005 GMT
> Additional Information: Escalation listing. DIPSI spam through Wanadoo relays; lack of response to complaints; lack of response to multiple /32s being listed; spam continues
> Currently active and flagged to be published in DNS
E> Je ne suis pas d'accord sur ton critère de jugement: plutôt que sur le E> nombre de spam/virus il me semblerait plus "subtil" de juger sur la E> réactivité de l'abuse. Celui de chez Free ne m'a que rarement déçu. E> Alors que de nombreuses plaintes de ma part sont restés sans effet chez E> wanadoo, noos, le 9 et même oléane (là c'est à mon gout inacceptable !!)
Mon critère de jugement est simple : juste quelques lignes de mes fichiers logs (grep proxad.net sur une partie de /var/log/mail.log)
Aug 1 20:29:09 moulon sm-mta[18189]: j71IT98x018189: Milter: connect: host=arp91-2-82-226-253-51.fbx.proxad.net, addr.226.253.51, shutdown Aug 1 20:29:09 moulon sm-mta[18189]: j71IT98x018189: arp91-2-82-226-253-51.fbx.proxad.net [82.226.253.51] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Aug 1 20:36:54 moulon sm-mta[18365]: j71IaFKu018365: rejecting commands from lns-vlq-14-rei-62-147-223-12.adsl.proxad.net [62.147.223.12] due to pre-greeting traffic (39 seconds) Aug 1 20:50:12 moulon sm-mta[18783]: j71InkgI018783: rejecting commands from vig38-3-82-228-185-123.fbx.proxad.net [82.228.185.123] due to pre-greeting traffic (26 seconds) Aug 1 21:30:05 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:08 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:09 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:10 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:15 moulon sm-mta[20041]: j71JT0Aq020041: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79] Aug 1 21:44:11 moulon sm-mta[20480]: j71JhgYR020480: rejecting commands from lns-vlq-31-rou-82-253-166-214.adsl.proxad.net [82.253.166.214] due to pre-greeting traffic (29 seconds) Aug 1 23:16:18 moulon sm-mta[22958]: j71LFwVI022958: rejecting commands from ris91-2-82-237-50-209.fbx.proxad.net [82.237.50.209] due to pre-greeting traffic (20 seconds) Aug 1 23:48:42 moulon sm-mta[23830]: j71LmaFd023830: rejecting commands from tru75-5-82-234-212-219.fbx.proxad.net [82.234.212.219] due to pre-greeting traffic (6 seconds) Aug 1 23:49:31 moulon sm-mta[23863]: j71LnVaO023863: Milter: connect: host=mne69-4-82-227-115-61.fbx.proxad.net, addr.227.115.61, shutdown Aug 1 23:49:31 moulon sm-mta[23863]: j71LnVaO023863: mne69-4-82-227-115-61.fbx.proxad.net [82.227.115.61] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Aug 2 00:31:05 moulon sm-mta[25146]: j71MUWUg025146: rejecting commands from lns-vlq-7-lil-82-254-199-238.adsl.proxad.net [82.254.199.238] due to pre-greeting traffic (33 seconds) Aug 2 00:58:55 moulon sm-mta[25689]: j71MwthX025689: Milter: connect: host=ron59-2-82-237-40-215.fbx.proxad.net, addr.237.40.215, shutdown Aug 2 00:58:55 moulon sm-mta[25689]: j71MwthX025689: ron59-2-82-237-40-215.fbx.proxad.net [82.237.40.215] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Aug 2 02:49:31 moulon sm-mta[28631]: j720n6vW028631: rejecting commands from pir44-2-82-238-248-3.fbx.proxad.net [82.238.248.3] due to pre-greeting traffic (25 seconds) Aug 2 06:17:29 moulon sm-mta[2995]: j724H37W002995: rejecting commands from pom94-1-81-57-196-61.fbx.proxad.net [81.57.196.61] due to pre-greeting traffic (26 seconds) Aug 2 06:58:14 moulon sm-mta[4846]: j724w6xp004846: rejecting commands from vbo91-1-82-238-216-169.fbx.proxad.net [82.238.216.169] due to pre-greeting traffic (8 seconds) Aug 2 08:10:56 moulon sm-mta[7513]: j726AjkK007513: rejecting commands from lns-vlq-33-ren-82-253-248-109.adsl.proxad.net [82.253.248.109] due to pre-greeting traffic (11 seconds) Aug 2 10:43:44 moulon sm-mta[14415]: j728haVX014415: rejecting commands from nsg93-4-82-230-194-164.fbx.proxad.net [82.230.194.164] due to pre-greeting traffic (8 seconds)
À vous de juger : ces bécanes se torpillent toutes seules :-)
p.s. : * shutdown veut dire que la bécane était répertoriée par spamhaus.
* cf 'relaying denied'
--
Guy Decoux
"E" == Eric PETIT <bidon@petit.hd.free.fr> writes:
E> Je ne suis pas d'accord sur ton critère de jugement: plutôt que sur le
E> nombre de spam/virus il me semblerait plus "subtil" de juger sur la
E> réactivité de l'abuse. Celui de chez Free ne m'a que rarement déçu.
E> Alors que de nombreuses plaintes de ma part sont restés sans effet chez
E> wanadoo, noos, le 9 et même oléane (là c'est à mon gout inacceptable !!)
Mon critère de jugement est simple : juste quelques lignes de mes
fichiers logs (grep proxad.net sur une partie de /var/log/mail.log)
Aug 1 20:29:09 moulon sm-mta[18189]: j71IT98x018189: Milter: connect: host=arp91-2-82-226-253-51.fbx.proxad.net, addr.226.253.51, shutdown
Aug 1 20:29:09 moulon sm-mta[18189]: j71IT98x018189: arp91-2-82-226-253-51.fbx.proxad.net [82.226.253.51] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Aug 1 20:36:54 moulon sm-mta[18365]: j71IaFKu018365: rejecting commands from lns-vlq-14-rei-62-147-223-12.adsl.proxad.net [62.147.223.12] due to pre-greeting traffic (39 seconds)
Aug 1 20:50:12 moulon sm-mta[18783]: j71InkgI018783: rejecting commands from vig38-3-82-228-185-123.fbx.proxad.net [82.228.185.123] due to pre-greeting traffic (26 seconds)
Aug 1 21:30:05 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=<cdperron@mainsl.com>, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 <cdperron@mainsl.com>... Relaying denied. Proper authentication required.
Aug 1 21:30:08 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=<postmaster@mainsl.com>, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 <postmaster@mainsl.com>... Relaying denied. Proper authentication required.
Aug 1 21:30:09 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=<msi53@mainsl.com>, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 <msi53@mainsl.com>... Relaying denied. Proper authentication required.
Aug 1 21:30:10 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=<dkolson@mainsl.com>, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 <dkolson@mainsl.com>... Relaying denied. Proper authentication required.
Aug 1 21:30:15 moulon sm-mta[20041]: j71JT0Aq020041: from=<choosydimfortress@fun.21cn.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79]
Aug 1 21:44:11 moulon sm-mta[20480]: j71JhgYR020480: rejecting commands from lns-vlq-31-rou-82-253-166-214.adsl.proxad.net [82.253.166.214] due to pre-greeting traffic (29 seconds)
Aug 1 23:16:18 moulon sm-mta[22958]: j71LFwVI022958: rejecting commands from ris91-2-82-237-50-209.fbx.proxad.net [82.237.50.209] due to pre-greeting traffic (20 seconds)
Aug 1 23:48:42 moulon sm-mta[23830]: j71LmaFd023830: rejecting commands from tru75-5-82-234-212-219.fbx.proxad.net [82.234.212.219] due to pre-greeting traffic (6 seconds)
Aug 1 23:49:31 moulon sm-mta[23863]: j71LnVaO023863: Milter: connect: host=mne69-4-82-227-115-61.fbx.proxad.net, addr.227.115.61, shutdown
Aug 1 23:49:31 moulon sm-mta[23863]: j71LnVaO023863: mne69-4-82-227-115-61.fbx.proxad.net [82.227.115.61] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Aug 2 00:31:05 moulon sm-mta[25146]: j71MUWUg025146: rejecting commands from lns-vlq-7-lil-82-254-199-238.adsl.proxad.net [82.254.199.238] due to pre-greeting traffic (33 seconds)
Aug 2 00:58:55 moulon sm-mta[25689]: j71MwthX025689: Milter: connect: host=ron59-2-82-237-40-215.fbx.proxad.net, addr.237.40.215, shutdown
Aug 2 00:58:55 moulon sm-mta[25689]: j71MwthX025689: ron59-2-82-237-40-215.fbx.proxad.net [82.237.40.215] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Aug 2 02:49:31 moulon sm-mta[28631]: j720n6vW028631: rejecting commands from pir44-2-82-238-248-3.fbx.proxad.net [82.238.248.3] due to pre-greeting traffic (25 seconds)
Aug 2 06:17:29 moulon sm-mta[2995]: j724H37W002995: rejecting commands from pom94-1-81-57-196-61.fbx.proxad.net [81.57.196.61] due to pre-greeting traffic (26 seconds)
Aug 2 06:58:14 moulon sm-mta[4846]: j724w6xp004846: rejecting commands from vbo91-1-82-238-216-169.fbx.proxad.net [82.238.216.169] due to pre-greeting traffic (8 seconds)
Aug 2 08:10:56 moulon sm-mta[7513]: j726AjkK007513: rejecting commands from lns-vlq-33-ren-82-253-248-109.adsl.proxad.net [82.253.248.109] due to pre-greeting traffic (11 seconds)
Aug 2 10:43:44 moulon sm-mta[14415]: j728haVX014415: rejecting commands from nsg93-4-82-230-194-164.fbx.proxad.net [82.230.194.164] due to pre-greeting traffic (8 seconds)
À vous de juger : ces bécanes se torpillent toutes seules :-)
p.s. :
* shutdown veut dire que la bécane était répertoriée par spamhaus.
E> Je ne suis pas d'accord sur ton critère de jugement: plutôt que sur le E> nombre de spam/virus il me semblerait plus "subtil" de juger sur la E> réactivité de l'abuse. Celui de chez Free ne m'a que rarement déçu. E> Alors que de nombreuses plaintes de ma part sont restés sans effet chez E> wanadoo, noos, le 9 et même oléane (là c'est à mon gout inacceptable !!)
Mon critère de jugement est simple : juste quelques lignes de mes fichiers logs (grep proxad.net sur une partie de /var/log/mail.log)
Aug 1 20:29:09 moulon sm-mta[18189]: j71IT98x018189: Milter: connect: host=arp91-2-82-226-253-51.fbx.proxad.net, addr.226.253.51, shutdown Aug 1 20:29:09 moulon sm-mta[18189]: j71IT98x018189: arp91-2-82-226-253-51.fbx.proxad.net [82.226.253.51] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Aug 1 20:36:54 moulon sm-mta[18365]: j71IaFKu018365: rejecting commands from lns-vlq-14-rei-62-147-223-12.adsl.proxad.net [62.147.223.12] due to pre-greeting traffic (39 seconds) Aug 1 20:50:12 moulon sm-mta[18783]: j71InkgI018783: rejecting commands from vig38-3-82-228-185-123.fbx.proxad.net [82.228.185.123] due to pre-greeting traffic (26 seconds) Aug 1 21:30:05 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:08 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:09 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:10 moulon sm-mta[20041]: j71JT0Aq020041: ruleset=check_rcpt, arg1=, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79], rejectU0 5.7.1 ... Relaying denied. Proper authentication required. Aug 1 21:30:15 moulon sm-mta[20041]: j71JT0Aq020041: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=mirail-1-82-66-77-79.fbx.proxad.net [82.66.77.79] Aug 1 21:44:11 moulon sm-mta[20480]: j71JhgYR020480: rejecting commands from lns-vlq-31-rou-82-253-166-214.adsl.proxad.net [82.253.166.214] due to pre-greeting traffic (29 seconds) Aug 1 23:16:18 moulon sm-mta[22958]: j71LFwVI022958: rejecting commands from ris91-2-82-237-50-209.fbx.proxad.net [82.237.50.209] due to pre-greeting traffic (20 seconds) Aug 1 23:48:42 moulon sm-mta[23830]: j71LmaFd023830: rejecting commands from tru75-5-82-234-212-219.fbx.proxad.net [82.234.212.219] due to pre-greeting traffic (6 seconds) Aug 1 23:49:31 moulon sm-mta[23863]: j71LnVaO023863: Milter: connect: host=mne69-4-82-227-115-61.fbx.proxad.net, addr.227.115.61, shutdown Aug 1 23:49:31 moulon sm-mta[23863]: j71LnVaO023863: mne69-4-82-227-115-61.fbx.proxad.net [82.227.115.61] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Aug 2 00:31:05 moulon sm-mta[25146]: j71MUWUg025146: rejecting commands from lns-vlq-7-lil-82-254-199-238.adsl.proxad.net [82.254.199.238] due to pre-greeting traffic (33 seconds) Aug 2 00:58:55 moulon sm-mta[25689]: j71MwthX025689: Milter: connect: host=ron59-2-82-237-40-215.fbx.proxad.net, addr.237.40.215, shutdown Aug 2 00:58:55 moulon sm-mta[25689]: j71MwthX025689: ron59-2-82-237-40-215.fbx.proxad.net [82.237.40.215] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA Aug 2 02:49:31 moulon sm-mta[28631]: j720n6vW028631: rejecting commands from pir44-2-82-238-248-3.fbx.proxad.net [82.238.248.3] due to pre-greeting traffic (25 seconds) Aug 2 06:17:29 moulon sm-mta[2995]: j724H37W002995: rejecting commands from pom94-1-81-57-196-61.fbx.proxad.net [81.57.196.61] due to pre-greeting traffic (26 seconds) Aug 2 06:58:14 moulon sm-mta[4846]: j724w6xp004846: rejecting commands from vbo91-1-82-238-216-169.fbx.proxad.net [82.238.216.169] due to pre-greeting traffic (8 seconds) Aug 2 08:10:56 moulon sm-mta[7513]: j726AjkK007513: rejecting commands from lns-vlq-33-ren-82-253-248-109.adsl.proxad.net [82.253.248.109] due to pre-greeting traffic (11 seconds) Aug 2 10:43:44 moulon sm-mta[14415]: j728haVX014415: rejecting commands from nsg93-4-82-230-194-164.fbx.proxad.net [82.230.194.164] due to pre-greeting traffic (8 seconds)
À vous de juger : ces bécanes se torpillent toutes seules :-)
p.s. : * shutdown veut dire que la bécane était répertoriée par spamhaus.
* cf 'relaying denied'
--
Guy Decoux
Bertrand B
Les email provenant d'adresses IP dynamiques sont automatiquement bloqu és par nos serveurs. Voici un lien où vous pouvez obtenir plus d'informa tions : http://www.hispeed.ch/important2.htm
Tiens hispeed j'ai eu pas mal de spam dechez eux ... et comme leut abuse est filtrépar SORBS ...
Les blacklists (DNSBL) sont une solution à la petite semaine pour technicien fainéant.
Les email provenant d'adresses IP dynamiques sont automatiquement bloqu és
par nos serveurs. Voici un lien où vous pouvez obtenir plus d'informa tions :
http://www.hispeed.ch/important2.htm
Tiens hispeed j'ai eu pas mal de spam dechez eux ... et comme leut abuse
est filtrépar SORBS ...
Les blacklists (DNSBL) sont une solution à la petite semaine pour
technicien fainéant.
Les email provenant d'adresses IP dynamiques sont automatiquement bloqu és par nos serveurs. Voici un lien où vous pouvez obtenir plus d'informa tions : http://www.hispeed.ch/important2.htm
Tiens hispeed j'ai eu pas mal de spam dechez eux ... et comme leut abuse est filtrépar SORBS ...
Les blacklists (DNSBL) sont une solution à la petite semaine pour technicien fainéant.
