[30501] in North American Network Operators' Group
Re: surge in spam email (fwd)
daemon@ATHENA.MIT.EDU (Tim Salo)
Wed Aug 9 15:35:46 2000
Date: Wed, 9 Aug 2000 14:34:00 -0500 (CDT)
From: Tim Salo <salo@networkcs.com>
Message-Id: <200008091934.OAA66231@us.networkcs.com>
To: nanog@merit.edu
In-Reply-To: <20000810072102.C19417@splatter.telstra.net>
Errors-To: owner-nanog-outgoing@merit.edu
> Date: Thu, 10 Aug 2000 07:21:02 +1200
> From: Joe Abley <jabley@automagic.org>
> Subject: Re: surge in spam email (fwd)
>
> On Wed, Aug 09, 2000 at 11:25:15AM -0500, Ben Beuchler wrote:
> > On Wed, Aug 09, 2000 at 09:20:07AM -0700, Roeland M.J. Meyer wrote:
> >=20
> > > Is Telstra still being blocked?
> >=20
> > petra:~$ ./spamtest 139.134.5.153
> > rbl.maps.vix.com =3D>=20
> > rss.maps.vix.com =3D>=20
> > dul.maps.vix.com =3D>=20
> > relays.orbs.org =3D> 127.0.0.4
> > outputs.orbs.org =3D>=20
>
> Note 127.0.0.4 indicates a manual listing -- it doesn't indicate that
> the relay 139.134.5.153 has been tested and found to be promiscuous.
Or, conceivably the relay was tested and found to _not_ be promiscuous.
Either way, it's not a story I would want to tell in court.
> $ dig txt 153.5.134.139.relays.orbs.org | grep TXT
> ;; 153.5.134.139.relays.orbs.org, type =3D TXT, class =3D IN
> 153.5.134.139.relays.orbs.org. 86400 TXT "Telstra and \
> Optus - spam haveners, refusing to act. "
>
> Highly unscientific research seems to indicate that it's the manual
> entries that cause the bulk of the false positives when testing for
> spam using the relays.orbs.org zone.
See above comment...
-tjs