• SPAM blacklist false positives

    From Fireball@VERT/FBEX to all on Thu Jan 17 18:09:34 2019
    Hi all!

    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

    I'm not sure this is working as intended, but I'd like to start refusing SPAM to get rid of the clutter, and I can't do that until this is fixed. Thank you!

    Fireball

    ---
    ■ Synchronet ■ My Brand-New BBS
  • From Digital Man@VERT to Fireball on Thu Jan 17 16:03:25 2019
    Re: SPAM blacklist false positives
    By: Fireball to all on Thu Jan 17 2019 01:09 pm

    Hi all!

    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"

    I'm not sure this is working as intended

    Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

    , but I'd like to start refusing
    SPAM to get rid of the clutter, and I can't do that until this is fixed. Thank you!

    You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL provider.

    digital man

    Synchronet "Real Fact" #55:
    Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
    Norco, CA WX: 58.3°F, 95.0% humidity, 0 mph S wind, 0.55 inches rain/24hrs

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From MRO@VERT/BBSESINF to Fireball on Thu Jan 17 21:14:24 2019
    Re: SPAM blacklist false positives
    By: Fireball to all on Thu Jan 17 2019 01:09 pm


    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"


    you can use a spambait trap.
    also dont forward unknown receipients to sysop.
    ---
    ■ Synchronet ■ ::: BBSES.info - free BBS services :::
  • From Digital Man@VERT to MRO on Thu Jan 17 20:58:46 2019
    Re: SPAM blacklist false positives
    By: MRO to Fireball on Thu Jan 17 2019 04:14 pm

    Re: SPAM blacklist false positives
    By: Fireball to all on Thu Jan 17 2019 01:09 pm


    I've checked, and double checked my spam.log against https://www.ultratools.com/tools/spamDBLookup. Pretty much every email server IP sending mail to the bbs is being flagged by Sync as a generic "Reason: Listed on sbl.spamhaus.org (see http://www.spamhaus.org/) as 172.110.31.205"


    you can use a spambait trap.

    I use spamassassin. Works good.
    http://wiki.synchro.net/howto:spamd

    Not sure what this has to do with Synchronet Programming though. :-)

    digital man

    This Is Spinal Tap quote #37:
    David St. Hubbins: We are Spinal Tap from the UK - you must be the USA!
    Norco, CA WX: 59.3°F, 93.0% humidity, 3 mph NNW wind, 0.45 inches rain/24hrs

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Fireball@VERT/FBEX to Digital Man on Fri Jan 18 00:51:09 2019
    Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

    You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL
    provider.

    digital man


    Hi DM,

    I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting the same thing from spamcop.net. The IP, as it turns out, is the local IP. lol Anyway, it turned up a false positive for a gmail server, so there's that...

    I don't know... I'll see if I can figure out spamassassin or something.

    Fireball

    ---
    ■ Synchronet ■ My Brand-New BBS
  • From Digital Man@VERT to Fireball on Fri Jan 18 06:24:10 2019
    Re: SPAM blacklist false positives
    By: Fireball to Digital Man on Thu Jan 17 2019 07:51 pm

    Normally DNS-blacklists would return a 127.0.0.x address for a positive match.

    You could try removing spamhaus from your ctrl/dns_blacklist.cfg file if you think it's just a problem with the DNSBL
    provider.

    I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting the same thing from spamcop.net.

    Do you have a DNS proxy or something?

    The IP, as it turns out, is the local IP. lol
    Anyway, it turned up a false positive for a gmail server, so there's that...

    I don't know... I'll see if I can figure out spamassassin or something.

    Sure.

    digital man

    Synchronet "Real Fact" #36:
    Synchronet's Windows DLLs are built with Microsoft Visual Studio/C++.
    Norco, CA WX: 54.2°F, 93.0% humidity, 0 mph SSE wind, 0.23 inches rain/24hrs

    ---
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From mark lewis@VERT to Fireball on Fri Jan 18 11:19:30 2019
    On 2019 Jan 17 19:51:08, you wrote to Digital Man:

    I removed spamhaus from the ctrl/dns_blacklist.cfg and now I'm getting
    the same thing from spamcop.net. The IP, as it turns out, is the local
    IP. lol Anyway, it turned up a false positive for a gmail server, so there's that...

    this sounds like what i see here... do you have a front line SMTP server that feeds the inbound mail to synchronet? if so, that's the IP that sync sees and uses when it checks the DNSBLs... i see this over here because i do have such a
    front line SMTP server to filter/block email at my network perimeter instead of
    allowing it to inundate my "real" SMTP server... in my case, since my front line SMTP server has already done the DNSBL lookups, one of my solutions was to
    stop sync from doing the lookup a second time... espepcially since it is/was trying to lookup my internal 192.168.x.y addresses in the DNSBLs...

    )\/(ark

    Always Mount a Scratch Monkey
    Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
    ... Never, never try to milk a cow when your hands are cold!!
    ---
    * Origin: (1:3634/12.73)
    ■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net
  • From Fireball@VERT/FBEX to Digital Man on Sun Jan 27 01:53:01 2019
    Re: SPAM blacklist false positives
    By: Fireball to Digital Man on Thu Jan 17 2019 07:51 pm

    Do you have a DNS proxy or something?


    No, my DNS is served by my registrar, but there's no proxy. I also don't proxy mail either.

    Sure.


    I need to get on that. I'm annoyed. lol!

    Fireball

    ---
    ■ Synchronet ■ My Brand-New BBS
  • From Fireball@VERT/FBEX to mark lewis on Sun Jan 27 01:56:41 2019
    On 2019 Jan 17 19:51:08, you wrote to Digital Man:

    this sounds like what i see here... do you have a front line SMTP server that feeds the inbound mail to synchronet? if so,

    Nope. No proxy or "front line" SMTP, just Synchronet facing the world. :D

    Fireball

    ---
    ■ Synchronet ■ My Brand-New BBS
  • From Fireball@VERT/FBEX to Digital Man on Sun Jan 27 02:58:15 2019
    Hi DM,

    I managed to get spamc and spamassassin working. Still not sure what happened with the blacklisting, but as I recall, it's never really worked. I'd hoped not to have to run another daemon because of limited memory, but it's at least working. Thank you!

    Fireball

    ---
    ■ Synchronet ■ My Brand-New BBS