Working with Spamhaus

William Herrin bill at herrin.us
Sat Aug 1 02:34:10 UTC 2015


On Fri, Jul 31, 2015 at 5:28 PM, Jaren Angerbauer
<jarenangerbauer at gmail.com> wrote:
> I work for Proofpoint -- we acquired SORBS back in 2011.  There is
> delisting (via SORBS support ticket).  Additionally, there is NO CHARGE to
> be delisted.

Hi Jaren,

The big problem I remember with SORBS from my ISP days was that if
they tested an open relay at IP address A and the return message came
from IP address B, they listed IP address B. This put me in an
impossible situation as an ISP providing an SMTP smarthost to my
authenticated customers. If just one of them screwed up their mail
programming, not trying to spam mind you, just screwed up their
configuration, my entire relay was hit with a block.

Practically speaking, to keep my mail server off SORBS I was required
to employ SORBS on my relay to block any customers whose IP appear as
an input into SORBS. If I wanted to stay off their list then I MUST
use them. Bad ethics there IMO.

Is itstill SORBS practice to list both input and output IP addresses
of an open relay, regardless of detected spam activity and without any
attempt to notify the mail op of the problem?

Regards,
Bill Herrin


-- 
William Herrin ................ herrin at dirtside.com  bill at herrin.us
Owner, Dirtside Systems ......... Web: <http://www.dirtside.com/>



More information about the NANOG mailing list