[30546] in North American Network Operators' Group
An example
daemon@ATHENA.MIT.EDU (Roeland M.J. Meyer)
Fri Aug 11 03:50:40 2000
Reply-To: <rmeyer@mhsc.com>
From: "Roeland M.J. Meyer" <rmeyer@mhsc.com>
To: "LIST NANOG (E-mail)" <nanog@merit.edu>
Date: Fri, 11 Aug 2000 00:49:07 -0700
Message-ID: <000f01c00368$a0dd8c90$eaaf6cc7@PEREGRIN>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0010_01C0032D.F47EB490"
Errors-To: owner-nanog-outgoing@merit.edu
This is a multi-part message in MIME format.
------=_NextPart_000_0010_01C0032D.F47EB490
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
I post some negative messages about ORBS and RBL and look what
happens! Gee, isn't it co-incidental that my mailer is now
blocked?
It sounds like straight-up intimidation actions to me. If this is
the action of a responsible anti-spam fanatic then it is an even
greater indictment of the entire RBL/ORBS movement.
The hostname is right, DNS is healthy, including my ORSC
root-zone servers, and I am running current sendmail with
anti-relay active.
Gee, maybe they're making a statement ...ya think?
That's alright, woods just hit my kill-file anyway >plonk<
But, this seriously indicates that this ORBS/RBL think is getting
way out of hand. Typical vigilante pattern.
> -----Original Message-----
> From: Mail Delivery Subsystem [mailto:MAILER-DAEMON@mhsc.com]
> Sent: Thursday, August 10, 2000 11:46 PM
> To: rmeyer@mhsc.com
> Subject: Returned mail: Service unavailable
>
>
> The original message was received at Thu, 10 Aug 2000
23:46:01 -0700
> from peregrin.lvrmr.mhsc.com [199.108.175.234]
>
> ----- The following addresses had permanent fatal
errors -----
> <woods@weird.com>
>
> ----- Transcript of session follows -----
> ... while talking to mail.weird.com.:
> >>> HELO condor.lvrmr.mhsc.com
> <<< 550-You are not permitted to send mail from
> condor.lvrmr.mhsc.com[199.108.175.226].
> <<< 550-All SMTP connections have been blocked from that
address,
> <<< 550-possibly because it has been listed in one of the many
RBLs,
> <<< 550-or possibly because your DNS is broken or your
> hostname is wrong.
> <<< 550-
> <<< 550-Please forward this message to your own LOCAL
> postmaster and ask
> <<< 550-them to contact us regarding this issue.
> <<< 550-
> <<< 550-Postmaster@[199.108.175.226]: Please contact
> <postmaster@most.weird.com>
> <<< 550-(via an unblocked server of course!) for exact
> details on why your
> <<< 550-mailer's connection was rejected. You must include
> your IP number
> <<< 550 given above in order to receive an accurate answer.
> 554 <woods@weird.com>... Service unavailable
>
------=_NextPart_000_0010_01C0032D.F47EB490
Content-Type: message/delivery-status;
name="ATT00011.dat"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="ATT00011.dat"
Reporting-MTA: dns; condor.lvrmr.mhsc.com
Received-From-MTA: DNS; peregrin.lvrmr.mhsc.com
Arrival-Date: Thu, 10 Aug 2000 23:46:01 -0700
Final-Recipient: RFC822; woods@weird.com
Action: failed
Status: 5.5.0
Remote-MTA: DNS; mail.weird.com
Diagnostic-Code: SMTP; 550-You are not permitted to send mail from condor.lvrmr.mhsc.com[199.108.175.226].
Last-Attempt-Date: Thu, 10 Aug 2000 23:46:19 -0700
------=_NextPart_000_0010_01C0032D.F47EB490
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment
Reply-To: <rmeyer@mhsc.com>
From: "Roeland M.J. Meyer" <rmeyer@mhsc.com>
To: "'Greg A. Woods'" <woods@weird.com>
Subject: RE: surge in spam email (fwd)
Date: Thu, 10 Aug 2000 23:48:35 -0700
Message-ID: <000701c00360$2c79fdf0$eaaf6cc7@PEREGRIN>
MIME-Version: 1.0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <20000811051943.CA1EC8C@proven.weird.com>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
I received the following today. I verified it myself.
-------------------------------------
[baa ~]$ dig txt 69.21.98.203.relays.orbs.org
<snip>
;; ANSWER SECTION:
69.21.98.203.relays.orbs.org. 1D IN TXT "untestable -
Telstra/Saturn
NZ has multiple open relays and has blocked the ORBS tester."
<big snip>
Both of these statements are blatent lies and completley
incorrect.
-------------------------------------
> -----Original Message-----
> From: woods@proven.weird.com
> [mailto:woods@proven.weird.com]On Behalf Of
> Greg A. Woods
> Sent: Thursday, August 10, 2000 10:20 PM
> To: rmeyer@mhsc.com
> Subject: RE: surge in spam email (fwd)
>
>
> [ On Thursday, August 10, 2000 at 18:05:41 (-0700), Roeland
> M.J. Meyer wrote: ]
> > Subject: RE: surge in spam email (fwd)
> >
> > The problem is ORBS black-holing Telstra/Optus. This
effectively
> > black-holes OZ and NZ, in their entirety. At that point, ORBS
> > credibility is toasted with me. I have also put three major
> > clients with AboveNet. ORBS's blackhole there, didn't sit
well
> > with me either. BTW, the current client is both in AboveNet
and
> > does traffic with OZ. ORBS has used up so many credibility
points
> > with me that I am now recommending against any affiliation
with
> > ORBS, in any way, shape, or means, whatsoever.
>
> Ah, no, ORBS doesn't "black-hole" anyone, nor block anyone.
>
> Only its users (such as myself) do such naughty things.
>
> > I'm not a spam fan, but ORBS is completely out of control and
> > renegade now. I can't condone such irresponsible behaviour. I
am
> > routing around the problem. If they had only blocked selected
> > subnets, that I can understand. But to block an entire
country,
> > for the sins of a few, is irresponsible. I have now endured
two
> > revenue hits because of ORBS ... there won't be a third ... I
> > can't afford it. The trust is broken and won't be restored.
BTW,
> > I am revisiting the RBL as well, however, they do seem a bit
more
> > responsible over there.
>
> I think if you look at the facts you'll find they're much
different
> than you've made them out to be.
>
> It just so happens that ORBS doesn't even list in their
*manual* list
> even the entirety of Telstra's net blocks!
>
> (not that it's possible to select a country, not even by
> their TLD, such
> as ".au", with a system like ORBS.....)
>
> --
> Greg A. Woods
>
> +1 416 218-0098 VE3TCP <gwoods@acm.org>
> <robohack!woods>
> Planix, Inc. <woods@planix.com>; Secrets of the Weird
> <woods@weird.com>
------=_NextPart_000_0010_01C0032D.F47EB490--
