Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Feb 2005 14:21:30 +0100
From:      cpghost@cordula.ws
To:        Ted Mittelstaedt <tedm@toybox.placo.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: mx2.freebsd.org in SORBS, AGAIN!
Message-ID:  <20050212132130.GA36643@fw.farid-hajji.net>
In-Reply-To: <LOBBIFDAGNMAMLGJJCKNMEGDFAAA.tedm@toybox.placo.com>
References:  <20050212042318.GA34223@fw.farid-hajji.net> <LOBBIFDAGNMAMLGJJCKNMEGDFAAA.tedm@toybox.placo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Feb 12, 2005 at 03:18:17AM -0800, Ted Mittelstaedt wrote:
> > for some reason, mx2.freebsd.org is being repeatedly added to,
> > and some days later removed from the SORBS dnsbl. They keep
> > adding it, and then removing it with a reason: Listed in error.
> > Right now, it's listed again.
> 
> A spammer is forging several of SORBS spamtrap e-mail
> addresses on their outgoing spams.  The spams hit freebsd.org
> which of course is bouncing them back to the sender, which
> is in this case is the spamtrap e-mail addresses.  This
> triggers the SORBS autolisting.

Ah, okay. That's a good explanation. I already suspected that
mx2 was misconfigured or something.

> If your using sendmail, you should be able to workaround this by
> putting the freebsd.org mailserver's IP address in your access.db
> file, that should override the lockout check.  (assuming your
> using sendmail to call SORBS)  If your using SORBS from
> SpamAssassin, then you can whitelist the freebsd mailing list
> traffic.

I'm using postfix, so I'll have to investigate how to whitelist
IP addresses. Thanks :)

> I personally don't use SORBS on my mailservers, but not because
> I don't think they are a good blacklist.  I really don't know
> enough about them to know if they are good or not.  However
> I do run a script that examines the counts of mail blocked by
> blacklist servers, and I periodically review them and prune
> away the blacklist servers that appear to be ineffective.  I would
> suggest that you do the same and use the results of this
> to determine whether to continue using SORBS.

That's a very good idea too.

> Ted

Thanks,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050212132130.GA36643>