[Dovecot] [info] Spamcop listing

[/dev/rob0]

On Thursday 2005-October-27 09:27, Timo Sirainen wrote:
> On Thu, 2005-10-27 at 09:14 -0500, /dev/rob0 wrote:
> > Smtp1.song.fi and smtp2.song.fi, our list servers, seem to have
> > gotten listed in the bl.spamcop.net RBL. Spamcop listings are
> > temporary and will time out, and because of occasional major false
> > positives (or perhaps collateral damage?) like this I don't use it
> > to reject mail. Anyone who IS using Spamcop to reject mail has
> > missed much of today's list traffic.
>
> Oh. I changed to use smtp.song.fi because dovecot.org's IP was listed
> as "Dynamic/Generic IP/rDNS address" by Sorbs. Maybe I should change
> back then if Spamcop is used more?..

http://www.spamcop.net/w3m?action=blcheck&ip=194.100.2.121
http://www.spamcop.net/w3m?action=blcheck&ip=194.100.2.122

Note the history, that these hosts have been listed and delisted. 
Chances are high that this is not a false positive per se, it is 
properly classified as collateral damage (non-spam coming from an 
exploitable server.)

In general I think neither Spamcop nor SORBS are considered prudent 
choices for blocking. Certainly not IMO.

And furthermore, I don't see anything wrong with dovecot.org.: good 
forward and reverse DNS, no RBL listings I can see:

http://www.dnsstuff.com/tools/ip4r.ch?ip=80.64.10.60

If I were you I would switch back. If you have any future SORBS 
problems, advise people not to use that list for blocking. :) And of 
course try to contact SORBS ... Mat might listen. I think he tries to 
be reasonable. Since you *do* have rDNS, you cannot be considered a 
dynamic IP by most measures.

You're not an ISP relaying for customers with probable zombied Windows 
machines, are you? If not your chances of being listed in a serious RBL 
are very slim, whereas I'd guess that song.fi's chances are medium to 
high.
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header