May 2006 - NZNOG - lists.nznog.org

E mails
by suzanne gerrard 21 May '06

21 May '06

3 2

Ihug Mail Admin?
by Erin Salmon - Unleash 21 May '06

21 May '06

Hi, If there are any Ihug Mail Admins floating around on the list would you be so good as to put your hand up? One of your customers is sending out thousands of promo newsletters with several images attached. It has been running since Friday and a number of our clients are already facing several hundred dollar excess usage charges from our good friends at Telecom from downloading it all. They have stupidly put the addresses in the CC field, and I believe the problem may be that some of the CC field recipients are running MS Exchange 2000. There is a bug if it is configured for open relaying which resends emails to the list of addresses if there are more than a certain number. I recall having this issue a year or two ago, but Im a bit hazy on the details, and Im not a mail guru myself. The KB seems to be taking this convenient moment to throw an error when I try to search it. If I recall correctly, SP3 for Exchange 2000 fixed the problem, so with any luck there would only be only server in the recipient list with the problem and we can stamp it out. If anyone recalls this Exchange issue, Id appreciate a steer too. Cheers, Erin Salmon Managing Director Unleash Technology Solutions <http://www.unleash.net.nz/> Phone: +64 3 365 1273 Mobile: +64 21 877 913 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.392 / Virus Database: 268.6.1/344 - Release Date: 19/05/2006

3 3

Static IP in a hurry ?
by Richard Naylor 20 May '06

20 May '06

Anyone from Xtra online tonight ? I have one of your customers who needs a static IP number in a hurry. A family member has died and they're webcasting the tangi. We've had 3 number changes in as many minutes. - They'll pay. Rich

1 1

SORBS still causing serious problems...
by Kris Angerano 19 May '06

19 May '06

Heya NZ guys. I work for an ISP out in Oregon US (EasyStreet). And we have recently been hit hard by the mistakes at SORBS. They have mistakenly added our 209.x static group as a dynamic IP range and blocked them all. This has been happening for 5 days now. We have submitted tickets to Matthew and his crew describing the problem and we even gave him our entire Dynamic and Static IP Blocks. To no avail, our RT ticket sits there untouched and the problem is unresolved. RT 77734, 76636 The worse part is we use SORBS, so initially we couldn't even receive some of our own customers email. Since then we have whitelisted our own IP block to solve that problem. But that isn't even a band aid. I called Matthew yesterday and he explained to me about his current 'troubles' so I didn't give him a hard time about our ticket. But this is getting ridiculous. A significant part of our 209.x block is business customers with their own mail servers. They are getting frustrated and we may start to lose business because of this. If anyone cares or has their eyes open out there, we need some help please! Thanks, Kris A

5 5

Re: [nznog] SORBS still listing Telecom static IPs as dynamic...
by Donald Neal 19 May '06

19 May '06

> > > > Please don't use American English. Won't someone please think of the > > children! > > > > American English, thats an oxymoron isnt it ? > I have no doubt of the relevance of most of this thread, but it seems to have now run its course. - Donald Neal List Asministrator Donald Neal |"Email is not to be used to pass on Support Engineer |information or data. It should be NGN Operations |used only for company business." Integration & Services Division +----------------------------------- Alcatel NZ Ltd - Telecom's network operations manager This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Re: [nznog] SORBS still listing Telecom static IPs as dynamic...
by Scott Weeks 18 May '06

18 May '06

----- Original Message Follows ----- From: "Jamie Riden" <jamesr(a)europe.com> > > No other blacklist operates like - or generates the hate > > - that S(ORBS) does. > > Actually, I've seen people say that and worse about every > single blacklist including SBL, which is probably the most > conservative one, all the way back to the MAPS original. They all say that if you're not a spammer, you have to pay LOTS of money to people they tell you to pay to be delisted? http://www.au.sorbs.net/faq/spamdb.shtml "Third and finally, if you are really not a spammer, or you are truly reformed, de-listing is relatively easy. You donate US$50 to a charity or trust approved by, and not connected with, SORBS for each spam received related to the listing. This is referred to as the SORBS 'fine'." scott

5 4

Re: [nznog] SORBS still listing Telecom static IPs as dynamic...
by Jeremy Strachan 18 May '06

18 May '06

My view is SORBS is a crock of shit, as was ORBS. If the day ends in "y" they block it ... Its called all care - no responsibility... They will blacklist entire (static) IP ranges with no warning, and no realistic way of removing the block, and treat everyone like s..t. The process is inherently flawed, because of the way static ranges end up on their list without reasonable checks. If they blocked a single IP address - then fine, its their wholesale and cavalier attitude to blocking entire ranges that is the root cause of the problem I have with S(ORBS), and why they are hated so much by people like me. No other blacklist operates like - or generates the hate - that S(ORBS) does. If they vanished tommorrow, the world would be a better place. Jeremy -----Original Message----- From: Tony Wicks [mailto:tony(a)prophecy.net.nz] Sent: Thursday, 18 May 2006 7:06 p.m. Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] SORBS still listing Telecom static IPs as dynamic... >> > One would wonder why any sane mail admin wouldnt pull data from as > many sources as possible when deciding on how to score spam. > Sure, but surely there has to be some measure of accuracy involved ? I mean SORBS is about as accurate as choosing every even IP address on Monday and public holidays, every odd one on every other day. It's just not even close to being what it is supposed to be billed as. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

ANZ Phish
by Joseph Miller 17 May '06

17 May '06

Just a heads-up: I just got sent a phishing scam email for the ANZ... Subject is ANZ Account Security Measures, included link ends up at: http://www.sunrise.cc/bbs/anz.php Relevant parts of the header as follows: Received: from [210.205.6.77] (helo=web-77.blueweb.co.kr) by exorsus.net with esmtp (Exim 4.52) id 1FgAyH-0006MQ-Oq for joff(a)XXXXXXXX.com; Wed, 17 May 2006 13:37:15 +1200 Received: (from apache(a)localhost) by web-77.blueweb.co.kr (8.11.6/8.11.6) id k4H1avJ20690; Wed, 17 May 2006 10:36:57 +0900 Date: Wed, 17 May 2006 10:36:57 +0900 Message-Id: <200605170136.k4H1avJ20690(a)web-77.blueweb.co.kr> To: joff(a)XXXXXXXXXXX.com Subject: ANZ Account Security Measures From: <service(a)anz.com> Reply-To: service(a)anz.com -- Thanks, Joseph Miller Application Developer _________________________________________ http://www.digiweb.co.nz Webhosting, Dedicated Servers, E-commerce Phone: (64 3) 351 6713 PLEASE NOTE: The information contained in this email message and any attached files may be confidential and subject to privilege. The views expressed may not necessarily be the official view of Digiweb New Zealand Limited. All technical advice and opinions are offered on a 'no-liability' basis. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original. Thank you.

1 0

Xtra Nationwide outage?
by Tristram Cheer 15 May '06

15 May '06

Anybody know anything about this? I got phones ringing off the hook from people saying xtra's got a nationwide outage right now. Rat got their cable again? -- ----------------------- Tristram Cheer UberNetworks Level 1 2a Vine St Whangarei 0101 M:021-715-823 W:09-438-5472 F:09-438-5473

6 6

Xtra on Spamcop now.
by Chris Hodgetts 15 May '06

15 May '06

May 15 11:12:35 caitlin postfix/smtpd[20038]: NOQUEUE: reject: RCPT from fep03.xtra.co.nz[210.54.141.243]: 554 Service unavailable; Client host [210.54.141.243] blocked using bl.spamcop.net; Blocked - see http://www.spamcop.net/bl.shtml?210.54.141.243; from=<someuser(a)xtra.co.nz> to=<user(a)domainname.com> proto=ESMTP helo=<fep03.xtra.co.nz> May 15 11:12:35 caitlin postfix/smtpd[20038]: disconnect from fep03.xtra.co.nz[210.54.141.243]

6 5