My server is blacklisted by SpamCop again!

[Tim Sailer]

On Tue, Feb 14, 2006 at 04:55:48PM -0500, Matt Kettler wrote:
> Tim Sailer wrote:
> > On Tue, Feb 14, 2006 at 04:34:56PM -0500, Denis Beauchemin wrote:
> >> Hello all,
> >>
> >> What do you do when one of your servers gets listed by SC because it 
> >> sent an email to one of their spam traps?  It happened to one of my 
> >> servers last Friday and it happened again with a different server today!
> >>
> >> What's most frustrating is the fact that they don't give me any 
> >> information I could use to pinpoint the PC that sent this through my 
> >> server :-( !  And my servers NEVER send out SPAM because I reject it 
> >> (only internal servers do this, don't flame me ;-) )
> > 
> > I've seen this happen when they forge a return path to the spamtrap,
> > and send email that would bounce. Right to the spam trap, and you're 
> > toast for 30+ days
> 
> 30+ days???
> 
> 132.210.244.93 has been listed for less than 24 hours and is scheduled for
> de-listing in 14 hours.
> 
> 
> Generally spamcop delists 24 hours after the last report arrives..
> 
> What happened that you encountered a 30-day listing??

It wasn't me. :) But, it was a crapload of bounces, from what I
could see in the server logs, across many days (4 or 5, IIRC). Seems
like the SC folks were less than amused. I got into this because the machine 
I was managing was the secondry MX, and when they took their server offline
to 'fix' things, I got all their mail queued up.

Tim

-- 
Tim Sailer <sailer at bnl.gov> 
Information and Special Technologies Program
Northeast Regional Counterintelligence Office
Brookhaven National Laboratory  (631) 344-3001