Hi all!

I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

I'm not sure this is working as intended, but I'd like to start refusing SPAM to get rid of the clutter, and I can't do that until this is fixed. Thank you!

Fireball

---
þ Synchronet þ My Brand-New BBS

Re: SPAM blacklist false positives
By: Fireball to all on Thu Jan 17 2019 01:09 pm

Hi all!

I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

I'm not sure this is working as intended

Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

, but I'd like to start refusing
SPAM to get rid of the clutter, and I can't do that until this is fixed. Thank you!

You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL provider.

digital man

Synchronet "Real Fact" #55:
Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
Norco, CA WX: 58.3øF, 95.0% humidity, 0 mph S wind, 0.55 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Re: SPAM blacklist false positives
By: Fireball to all on Thu Jan 17 2019 01:09 pm

I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

you can use a spambait trap.
also dont forward unknown receipients to sysop.
---
þ Synchronet þ ::: BBSES.info - free BBS services :::

Re: SPAM blacklist false positives
By: MRO to Fireball on Thu Jan 17 2019 04:14 pm

Re: SPAM blacklist false positives
By: Fireball to all on Thu Jan 17 2019 01:09 pm

I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

you can use a spambait trap.

I use spamassassin. Works good.
http://wiki.synchro.net/howto:spamd

Not sure what this has to do with Synchronet Programming though. :-)

digital man

This Is Spinal Tap quote #37:
David St. Hubbins: We are Spinal Tap from the UK - you must be the USA!
Norco, CA WX: 59.3øF, 93.0% humidity, 3 mph NNW wind, 0.45 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL
provider.

digital man

Hi DM,

I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting the same thing from spamcop.net. The IP, as it turns out, is the local IP. lol Anyway, it turned up a false positive for a gmail server, so there's that...

I don't know... I'll see if I can figure out spamassassin or something.

Fireball

---
þ Synchronet þ My Brand-New BBS

Re: SPAM blacklist false positives
By: Fireball to Digital Man on Thu Jan 17 2019 07:51 pm

Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL
provider.

I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting the same thing from spamcop.net.

Do you have a DNS proxy or something?

The IP, as it turns out, is the local IP. lol
Anyway, it turned up a false positive for a gmail server, so there's that...

I don't know... I'll see if I can figure out spamassassin or something.

Sure.

digital man

Synchronet "Real Fact" #36:
Synchronet's Windows DLLs are built with Microsoft Visual Studio/C++.
Norco, CA WX: 54.2øF, 93.0% humidity, 0 mph SSE wind, 0.23 inches rain/24hrs

---
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

On 2019 Jan 17 19:51:08, you wrote to Digital Man:

I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting
the same thing from spamcop.net. The IP, as it turns out, is the local
IP. lol Anyway, it turned up a false positive for a gmail server, so there's that...

this sounds like what i see here... do you have a front line SMTP server that feeds the inbound mail to synchronet? if so, that's the IP that sync sees and uses when it checks the DNSBLs... i see this over here because i do have such a
front line SMTP server to filter/block email at my network perimeter instead of
allowing it to inundate my "real" SMTP server... in my case, since my front line SMTP server has already done the DNSBL lookups, one of my solutions was to
stop sync from doing the lookup a second time... espepcially since it is/was trying to lookup my internal 192.168.x.y addresses in the DNSBLs...

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... Never, never try to milk a cow when your hands are cold!!
---
* Origin: (1:3634/12.73)
þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net