[TriLUG] recent "Poor Reputation Sender" bounces

[ac via TriLUG]

There are many different types of blacklists... the main differences
are reporting or non reporting and auto de-listing or manual de-listing
some blacklists are also 'permanent' (like senderscore) or transient or
temporary, etc. Then, there are blacklists where the protocol (methods)
turn them into sometimes reporting sometimes auto de-listing and
sometimes permanent. Some are combination lists (combining data from
multiple individual lists) and some work in weird and wonderful ways

"public" relayers (@yahoo @gmail etc) have many spammers @gmail or
@yahoo and manage there outgoing que and their incoming que's very
differently to a hosting provider with 1000 domains receiving or even
sending on a single ipv4 resource (or multiple redundant resources) 

Companies like Yahoo, Microsoft and Google also all have their own
"rules" for getting listed, getting re-evaluated and/or getting blocked
Some of the large companies also use (and some even share) abuse data
Some are very paranoid about their data...

On Fri, 19 Jul 2019 05:09:02 -0400
shay walters via TriLUG <trilug at trilug.org> wrote:

> For what it's worth, a while back I had gotten black-listed by yahoo
> and I finally figured out that it was an account getting security
> camera images that was set up on a motion detector which was
> forwarding email from my server to a yahoo account, and when
> something would trigger lots of images (rain, snow, wind), yahoo
> would interpret that as spamming.  In this case, stopping the
> offending emails cleared up the black-list in a short time without
> having to email anyone to get de-listed or anything. (I'm not sure
> exactly how long it took, seems like a few days.) So it's possible
> there might be some on-going action that is keeping a black-list
> active.  If it's a server that has multiple accounts, maybe even
> someone else on the same server. This may have no bearing on your
> particular situation, but I thought I'd mention it just in case.
> 
> -Shay
> 
> 
> On Fri, Jul 19, 2019 at 3:12 AM ac via TriLUG <trilug at trilug.org>
> wrote:
> 
> > On Thu, 18 Jul 2019 18:22:33 +0000 (GMT)
> > Joseph Mack NA3T via TriLUG <trilug at trilug.org> wrote:  
> > > On Thu, 18 Jul 2019, Alan Porter wrote:  
> > > >> I've offered my help to the SC (in e-mail from this address),
> > > >> but haven't heard back.  
> > > > I would think that as a user of trilug.org, you could put in
> > > > such a request. Just be polite and describe well the problem
> > > > you're seeing.  
> > > Thanks.
> > > I didn't realise the little guy could do this. I thought it would
> > > have to be someone associated with the domain name registration.
> > > Sure enough, there are instructions at earthlink on what to do to
> > > get yourself unblocked, and a notice saying that the blocks don't
> > > apply to the e-mail address they give you.
> > > I did all they said to do and sent it off to the abuse address to
> > > immediately get a bounce from cloudmark.com
> > > Your host has been blocked because it is listed with one or more
> > > RBLs. Please check with the services listed below to find out
> > > which RBL(s) your are listed with and get information on how to
> > > get removed. Cloudmark Sender Intelligence
> > > http://csi.cloudmark.com/reset-request/
> > > I take it that getting unblocked is a recursive process?
> > > If someone's sending spam from trilug.org, won't the blocks be all
> > > back in place in a short time and my efforts will be futile? Is it
> > > possible we're getting blocked and no-one is doing anything bad
> > > here? Thanks Joe
> > >  
> > afaik nobody from Pilot is sending spam right now... This has to do
> > with an old report and I believe that the block is still related to
> > the SenderScore http://www.senderscore.org/ listing as well, yes you
> > can apply to have it removed, it is old and stale, so hopefully they
> > will agree to either increase the score or to remove/reset the false
> > reputation score... and yes, you can also do the cloudmark.com 'grey
> > list' application, usually, when there is only old single digit
> > complaints it does not matter who requests a review... When there is
> > ongoing, recurring or chronic reports, then it usually becomes more
> > challenging :)
> >
> > hth
> >
> > Andre
> > --
> > This message was sent to: Shay Walters <shaywalters at gmail.com>
> > To unsubscribe, send a blank message to trilug-leave at trilug.org
> > from that address.
> > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> > Unsubscribe or edit options on the web  :
> > https://www.trilug.org/mailman/options/trilug/shaywalters%40gmail.com
> > Welcome to TriLUG: https://trilug.org/welcome