[125480] in North American Network Operators' Group
Re: Senderbase is offbase, need some help
daemon@ATHENA.MIT.EDU (Jon Lewis)
Sat Apr 17 19:07:28 2010
Date: Sat, 17 Apr 2010 19:07:04 -0400 (EDT)
From: Jon Lewis <jlewis@lewis.org>
To: William Herrin <bill@herrin.us>
In-Reply-To: <w2y3c3e3fca1004171345pae77b36asfc462fb307aeb948@mail.gmail.com>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
--474284613-1276845966-1271545624=:5148
Content-Type: TEXT/PLAIN; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8BIT
On Sat, 17 Apr 2010, William Herrin wrote:
> On Fri, Apr 16, 2010 at 6:25 PM, Mike <mike-nanog@tiedyenetworks.com> wrote:
>> I've tried to get the attention of senderbase, which is claiming activity
>> from my address space which is in fact either un-routed or within dynamic
>> subscriber blocks that have outbound smtp filtering in effect.
>
> Interesting; I see similar results for my address space. Two
> addresses, one of which hasn't been attached to a machine for a decade
> and the other a virtual IP on a web server where the particular IP
> never emits connections. Magnitude's only "0.48" for both but still,
> they shouldn't even appear.
I suspect a bug in their system. I checked a handful of unrouted blocks
from our address space and eventually hit a /24 from which senderbase
lists an IP with magnitude 0.48, but the space hasn't been routed for 13
months. They say they saw something from it on 2010-04-06...which I'd say
is highly unlikely.
----------------------------------------------------------------------
Jon Lewis | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
--474284613-1276845966-1271545624=:5148--
