Re: Spam & GCI

From: Matthew Schumacher <schu@schu.net>
Date: Wed Apr 21 2004 - 09:21:07 AKDT

In sendmail the access db takes priority over the rbls so you can
whitelist the gci servers there.

schu

Jim Dory wrote:
> Leif Sawyer wrote:
>
>
>>Dee writes:
>>
>>
>>
>>>Need I say more ? Leif ?
>>>
>>>http://www.spamcop.net/w3m?action=checkblock&ip=208.138.130.81
>>>
>>>
>>
>>C'est no moi.
>>
>>The problem is that customers are sending spam through, which gets
>>reported and treated as if it were relayed (which, it was) through
>>an open server (which it is not)
>>
>>
>>Practically every ISP deals with this, I'm sure. And even if they're
>>enforcing authentication for every mail, all that does is give them
>>more 'meat' to go after the infringing customer.
>>
>>We do go after the infringers -- in fact, yesterday there were at
>>least 8 folks shut off for spamming. I've got a couple packet-caps
>>for the evidence file.
>>
>>
>>But I don't have anything to do with the mail systems. Although
>>I did report this to them yesterday.
>>
>>:-)
>>
>>
>
> I didn't pay too much attention to this thread but I started
> investigating a mail problem I am having at work and now I'm sitting
> upright.
>
> I don't know what to do about this. I'm using sendmail on a Cobalt, and
> here is a cut on my maillog when I sent a test mesage (I xxx'd my
> internal ip address):
>
> "Apr 21 08:06:33 www in.qpopper[13059]: jdory at xxx.xxx.xxx.xxx
> (xxx.xxx.xxx.xxx): -ERR Unknown command: "xsender".
> Apr 21 08:08:56 www sendmail[13193]: i3LG8nh13193: ruleset=check_relay,
> arg1=mmp-3.gci.net, arg2=208.138.130.77, relay=mmp-3.gci.net
> [208.138.130.77], reject=553 5.3.0 Spam blocked see:
> http://spamcop.net/bl.shtml?208.138.130.77
> Apr 21 08:08:58 www sendmail[13193]: NOQUEUE: mmp-3.gci.net
> [208.138.130.77] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
> Apr 21 08:09:07 www sendmail[13194]: i3LG90h13194: ruleset=check_relay,
> arg1=mmp-3.gci.net, arg2=208.138.130.77, relay=mmp-3.gci.net
> [208.138.130.77], reject=553 5.3.0 Spam blocked see:
> http://spamcop.net/bl.shtml?208.138.130.77
> Apr 21 08:09:09 www sendmail[13194]: NOQUEUE: mmp-3.gci.net
> [208.138.130.77] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
> "
>
> I sent this message to a coworker who has not been receiving mail. We
> run our own mail server, but use GCI as ISP and smtp.gci.net.
> Any advice on who to contact/what to do?
>
> cheers, Jim
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Apr 21 09:20:41 2004

This archive was generated by hypermail 2.1.8 : Wed Apr 21 2004 - 09:20:42 AKDT