On Thursday 2005-October-27 09:27, Timo Sirainen wrote:
On Thu, 2005-10-27 at 09:14 -0500, /dev/rob0 wrote:
Smtp1.song.fi and smtp2.song.fi, our list servers, seem to have gotten listed in the bl.spamcop.net RBL. Spamcop listings are temporary and will time out, and because of occasional major false positives (or perhaps collateral damage?) like this I don't use it to reject mail. Anyone who IS using Spamcop to reject mail has missed much of today's list traffic.
Oh. I changed to use smtp.song.fi because dovecot.org's IP was listed as "Dynamic/Generic IP/rDNS address" by Sorbs. Maybe I should change back then if Spamcop is used more?..
http://www.spamcop.net/w3m?action=blcheck&ip=194.100.2.121 http://www.spamcop.net/w3m?action=blcheck&ip=194.100.2.122
Note the history, that these hosts have been listed and delisted. Chances are high that this is not a false positive per se, it is properly classified as collateral damage (non-spam coming from an exploitable server.)
In general I think neither Spamcop nor SORBS are considered prudent choices for blocking. Certainly not IMO.
And furthermore, I don't see anything wrong with dovecot.org.: good forward and reverse DNS, no RBL listings I can see:
http://www.dnsstuff.com/tools/ip4r.ch?ip=80.64.10.60
If I were you I would switch back. If you have any future SORBS problems, advise people not to use that list for blocking. :) And of course try to contact SORBS ... Mat might listen. I think he tries to be reasonable. Since you *do* have rDNS, you cannot be considered a dynamic IP by most measures.
You're not an ISP relaying for customers with probable zombied Windows machines, are you? If not your chances of being listed in a serious RBL are very slim, whereas I'd guess that song.fi's chances are medium to high.
mail to this address is discarded unless "/dev/rob0"
or "not-spam" is in Subject: header