[151943] in North American Network Operators' Group
RE: SORBS?!
daemon@ATHENA.MIT.EDU (Drew Weaver)
Fri Apr 6 07:32:34 2012
From: Drew Weaver <drew.weaver@thenap.com>
To: "'goemon@anime.net'" <goemon@anime.net>
Date: Fri, 6 Apr 2012 07:31:47 -0400
In-Reply-To: <Pine.LNX.4.64.1204050946160.14955@sasami.anime.net>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
That's just not true, we would much rather be notified of something that a =
reputation list finds objectionable and take it down ourselves than have Se=
nderbase set a poor reputation on dozens of IaaS customers.
-Drew
-----Original Message-----
From: goemon@anime.net [mailto:goemon@anime.net]=20
Sent: Thursday, April 05, 2012 12:48 PM
To: Drew Weaver
Cc: 'Sam Oduor'; Chris Conn; nanog@nanog.org
Subject: RE: SORBS?!
This is often the only way to get peoples attention and get action.
Providers dont care about individual /32's and will let them sit around and=
spew nigerian scams and pill spams without any consequences.
But they will care about a /24.
-Dan
On Thu, 5 Apr 2012, Drew Weaver wrote:
> Now, if we could only teach Senderbase that if their customers receive 'q=
uestionable' smtp traffic from 1 IP address in a /24 it doesn't mean that a=
ll IP addresses in that /24 are malicious we'd really be living it up in 20=
12.
>
>
>
> -----Original Message-----
> From: Sam Oduor [mailto:sam.oduor@gmail.com]
> Sent: Thursday, April 05, 2012 7:56 AM
> To: Chris Conn
> Cc: nanog@nanog.org
> Subject: Re: SORBS?!
>
> Some of the IP's I manage got blacklisted and its true they were spamming=
and Sorbs had a very valid reason for blacklisting them.
>
> I got this response response from sorbs after resolving the problem amica=
bly. Sorbs responded well on time.
>
> *Your request appear to have been resolved. If you have any further quest=
ions or concerns, please respond to this message.
>
> Please note:
>
> If your IP address has been delisted (marked as 'Inactive'), it will take=
up to 2 hours to get from the database to all the SORBS DNS servers. Chan=
ges to the database are exported to the DNS zone files periodically, not im=
mediately after every change. Furthermore, after the updated database cont=
ents have been exported to the DNS zone files, it will then take up to 48 h=
ours for the outdated DNS information to be removed from DNS caches around =
the world - none of these are in SORBS' control.
>
> Please do not reply to this call with problems not related to this ticket=
or your request will be ignored.
>
>
>
> *
> *On Wed, Apr 4, 2012 at 10:53 PM, Chris Conn <cconn@b2b2c.ca> wrote:
> *
>>
>> *Hello,
>>
>> Is anyone from SORBS still listening? We have a few IP addresses here
>> and there that are listed, one in particular that has been for a spam=20
>> incident from over a year ago. The "last spam" date is 03/05/2011=20
>> according to their lookup tools.* *
>>
>> We don't have access to their Net Manager even if our ARIN POC=20
>> corresponds to the account on their system we opened a while ago. We=20
>> use their ISP feedback form and never get any responses back.* *
>>
>> Is SORBS still relevant and functional?* *
>>
>> Sincerely,*
>>
>> Chris Conn
>> B2B2C.ca
>>
>>
>
>
> --
> Samson Oduor
>
>
