From owner-freebsd-questions@FreeBSD.ORG Sat Feb 12 13:25:41 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8782C16A4CE for ; Sat, 12 Feb 2005 13:25:41 +0000 (GMT) Received: from fw.farid-hajji.net (fw.farid-hajji.net [213.146.115.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4BC6443D4C for ; Sat, 12 Feb 2005 13:25:40 +0000 (GMT) (envelope-from cpghost@cordula.ws) Received: from fw.farid-hajji.net (net4801-2 [192.168.254.1]) by fw.farid-hajji.net (Postfix) with ESMTP id B763B4AEF5; Sat, 12 Feb 2005 14:21:30 +0100 (CET) Date: Sat, 12 Feb 2005 14:21:30 +0100 From: cpghost@cordula.ws To: Ted Mittelstaedt Message-ID: <20050212132130.GA36643@fw.farid-hajji.net> References: <20050212042318.GA34223@fw.farid-hajji.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.6i cc: freebsd-questions@freebsd.org Subject: Re: mx2.freebsd.org in SORBS, AGAIN! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Feb 2005 13:25:41 -0000 On Sat, Feb 12, 2005 at 03:18:17AM -0800, Ted Mittelstaedt wrote: > > for some reason, mx2.freebsd.org is being repeatedly added to, > > and some days later removed from the SORBS dnsbl. They keep > > adding it, and then removing it with a reason: Listed in error. > > Right now, it's listed again. > > A spammer is forging several of SORBS spamtrap e-mail > addresses on their outgoing spams. The spams hit freebsd.org > which of course is bouncing them back to the sender, which > is in this case is the spamtrap e-mail addresses. This > triggers the SORBS autolisting. Ah, okay. That's a good explanation. I already suspected that mx2 was misconfigured or something. > If your using sendmail, you should be able to workaround this by > putting the freebsd.org mailserver's IP address in your access.db > file, that should override the lockout check. (assuming your > using sendmail to call SORBS) If your using SORBS from > SpamAssassin, then you can whitelist the freebsd mailing list > traffic. I'm using postfix, so I'll have to investigate how to whitelist IP addresses. Thanks :) > I personally don't use SORBS on my mailservers, but not because > I don't think they are a good blacklist. I really don't know > enough about them to know if they are good or not. However > I do run a script that examines the counts of mail blocked by > blacklist servers, and I periodically review them and prune > away the blacklist servers that appear to be ineffective. I would > suggest that you do the same and use the results of this > to determine whether to continue using SORBS. That's a very good idea too. > Ted Thanks, -cpghost. -- Cordula's Web. http://www.cordula.ws/