• SPAM blacklist false posi

    From Fireball@VERT/FBEX to all on Thursday, January 17, 2019 21:09:00
    Hi all!

    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

    I'm not sure this is working as intended, but I'd like to start refusing SPAM to get rid of the clutter, and I can't do that until this is fixed. Thank you!

    Fireball

    ---
    Synchronet My Brand-New BBS
  • From Digital Man@VERT to Fireball on Thursday, January 17, 2019 19:03:00
    Re: SPAM blacklist false positives
    By: Fireball to all on Thu Jan 17 2019 01:09 pm

    Hi all!

    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

    I'm not sure this is working as intended

    Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

    , but I'd like to start refusing
    SPAM to get rid of the clutter, and I can't do that until this is fixed. Thank you!

    You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL provider.

    digital man

    Synchronet "Real Fact" #55:
    Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
    Norco, CA WX: 58.3F, 95.0% humidity, 0 mph S wind, 0.55 inches rain/24hrs

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From MRO@VERT/BBSESINF to Fireball on Friday, January 18, 2019 00:14:00
    Re: SPAM blacklist false positives
    By: Fireball to all on Thu Jan 17 2019 01:09 pm


    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"


    you can use a spambait trap.
    also dont forward unknown receipients to sysop.
    ---
    Synchronet ::: BBSES.info - free BBS services :::
  • From Digital Man@VERT to MRO on Thursday, January 17, 2019 23:58:00
    Re: SPAM blacklist false positives
    By: MRO to Fireball on Thu Jan 17 2019 04:14 pm

    Re: SPAM blacklist false positives
    By: Fireball to all on Thu Jan 17 2019 01:09 pm


    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"


    you can use a spambait trap.

    I use spamassassin. Works good.
    http://wiki.synchro.net/howto:spamd

    Not sure what this has to do with Synchronet Programming though. :-)

    digital man

    This Is Spinal Tap quote #37:
    David St. Hubbins: We are Spinal Tap from the UK - you must be the USA!
    Norco, CA WX: 59.3F, 93.0% humidity, 3 mph NNW wind, 0.45 inches rain/24hrs

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From Fireball@VERT/FBEX to Digital Man on Friday, January 18, 2019 03:51:00
    Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

    You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL
    provider.

    digital man


    Hi DM,

    I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting the same thing from spamcop.net. The IP, as it turns out, is the local IP. lol Anyway, it turned up a false positive for a gmail server, so there's that...

    I don't know... I'll see if I can figure out spamassassin or something.

    Fireball

    ---
    Synchronet My Brand-New BBS
  • From Digital Man@VERT to Fireball on Friday, January 18, 2019 09:24:00
    Re: SPAM blacklist false positives
    By: Fireball to Digital Man on Thu Jan 17 2019 07:51 pm

    Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

    You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL
    provider.

    I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting the same thing from spamcop.net.

    Do you have a DNS proxy or something?

    The IP, as it turns out, is the local IP. lol
    Anyway, it turned up a false positive for a gmail server, so there's that...

    I don't know... I'll see if I can figure out spamassassin or something.

    Sure.

    digital man

    Synchronet "Real Fact" #36:
    Synchronet's Windows DLLs are built with Microsoft Visual Studio/C++.
    Norco, CA WX: 54.2F, 93.0% humidity, 0 mph SSE wind, 0.23 inches rain/24hrs

    ---
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net
  • From mark lewis@VERT to Fireball on Friday, January 18, 2019 14:19:00
    On 2019 Jan 17 19:51:08, you wrote to Digital Man:

    I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting
    the same thing from spamcop.net. The IP, as it turns out, is the local
    IP. lol Anyway, it turned up a false positive for a gmail server, so there's that...

    this sounds like what i see here... do you have a front line SMTP server that feeds the inbound mail to synchronet? if so, that's the IP that sync sees and uses when it checks the DNSBLs... i see this over here because i do have such a
    front line SMTP server to filter/block email at my network perimeter instead of
    allowing it to inundate my "real" SMTP server... in my case, since my front line SMTP server has already done the DNSBL lookups, one of my solutions was to
    stop sync from doing the lookup a second time... espepcially since it is/was trying to lookup my internal 192.168.x.y addresses in the DNSBLs...

    )\/(ark

    Always Mount a Scratch Monkey
    Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
    ... Never, never try to milk a cow when your hands are cold!!
    ---
    * Origin: (1:3634/12.73)
    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net