[30501] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: surge in spam email (fwd)

daemon@ATHENA.MIT.EDU (Tim Salo)
Wed Aug 9 15:35:46 2000

Date: Wed, 9 Aug 2000 14:34:00 -0500 (CDT)
From: Tim Salo <salo@networkcs.com>
Message-Id: <200008091934.OAA66231@us.networkcs.com>
To: nanog@merit.edu
In-Reply-To: <20000810072102.C19417@splatter.telstra.net>
Errors-To: owner-nanog-outgoing@merit.edu


> Date: Thu, 10 Aug 2000 07:21:02 +1200
> From: Joe Abley <jabley@automagic.org>
> Subject: Re: surge in spam email (fwd)
> 
> On Wed, Aug 09, 2000 at 11:25:15AM -0500, Ben Beuchler wrote:
> > On Wed, Aug 09, 2000 at 09:20:07AM -0700, Roeland M.J. Meyer wrote:
> >=20
> > > Is Telstra still being blocked?
> >=20
> > petra:~$ ./spamtest 139.134.5.153
> > rbl.maps.vix.com =3D>=20
> > rss.maps.vix.com =3D>=20
> > dul.maps.vix.com =3D>=20
> > relays.orbs.org =3D> 127.0.0.4
> > outputs.orbs.org =3D>=20
> 
> Note 127.0.0.4 indicates a manual listing -- it doesn't indicate that
> the relay 139.134.5.153 has been tested and found to be promiscuous.

Or, conceivably the relay was tested and found to _not_ be promiscuous.

Either way, it's not a story I would want to tell in court.

>   $ dig txt 153.5.134.139.relays.orbs.org | grep TXT
>   ;;	153.5.134.139.relays.orbs.org, type =3D TXT, class =3D IN
>   153.5.134.139.relays.orbs.org.	86400	TXT	"Telstra and \
>     Optus - spam haveners, refusing to act. "
> 
> Highly unscientific research seems to indicate that it's the manual
> entries that cause the bulk of the false positives when testing for
> spam using the relays.orbs.org zone.

See above comment...

-tjs


home help back first fref pref prev next nref lref last post