CASE: C-679 E-271593
ea...@optonline.net
is listed on APEWS as
Oooops 68.236.182.179 is currently listed in APEWS :-(
Entry matching your Query: E-271593
68.236.128.0/18
CASE: C-679
AS19262 US, ISP permits abuse and/or ignores criminal activity
Special Reason:
ISP permits abuse and/or ignores criminal activity
We have had some customers send us emails and our replies to them are
blocked, but I'm not sure if the above listing is the reason or
something else. I've looked up the ip on http://www.uceprotect.net/en/rblcheck.php
and it looks like the server is part of a blocked owned by Verizon. I
tried calling Verizon to see if they could help determine the reason
for this listing but they said the PTR is controlled by netriplex.
Any clues why we might be blocked and what I should try to diagnose or
resolve it?
--
Comments posted to news.admin.net-abuse.blocklisting
are solely the responsibility of their author. Please
read the news.admin.net-abuse.blocklisting FAQ at
http://www.blocklisting.com/faq.html before posting.
Shmuel (Seymour J.) Metz
06/06/2008
at 01:12 AM, ea...@optonline.net said:
>I tried calling Verizon to see if they could help determine the
>reason for this listing but they said the PTR is controlled by
>netriplex.
Sure looks like verizon to me:
nslookup -type=any 179.182.236.68.in-addr.arpa
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
179.182.236.68.in-addr.arpa name = monolith.veteransadvantage.com
Authoritative answers can be found from:
182.236.68.in-addr.arpa nameserver = ns4.verizon.net
182.236.68.in-addr.arpa nameserver = ns1.bellatlantic.net
182.236.68.in-addr.arpa nameserver = ns2.verizon.net
182.236.68.in-addr.arpa nameserver = ns2.bellatlantic.net
>Any clues why we might be blocked and what I should try to diagnose or
>resolve it?
http://www.completewhois.com/cgi2/rbl_lookup.cgi?query=68.236.182.179&display=webtable
doesn't show any hits? Have you tried asking your customers?
--
Shmuel (Seymour J.) Metz, truly insane Spews puppet
<http://patriot.net/~shmuel>
I reserve the right to publicly post or ridicule any abusive
E-mail. Reply to domain Patriot dot net user shmuel+news to contact
me. Do not reply to spam...@library.lspace.org
D. Stussy
message news:4849a99b$2$fuzhry+tra$mr2...@news.patriot.net...
> In <272e6a6b-a043-4083...@a1g2000hsb.googlegroups.com>, on
06/06/2008 at 01:12 AM, ea...@optonline.net said:
> >I tried calling Verizon to see if they could help determine the
> >reason for this listing but they said the PTR is controlled by
> >netriplex.
>
> Sure looks like verizon to me:
> Authoritative answers can be found from:
> 182.236.68.in-addr.arpa nameserver = ns4.verizon.net
> 182.236.68.in-addr.arpa nameserver = ns1.bellatlantic.net
> 182.236.68.in-addr.arpa nameserver = ns2.verizon.net
> 182.236.68.in-addr.arpa nameserver = ns2.bellatlantic.net
Just because it's their servers doesn't mean they administer it. There are
plenty of servers where third-party administrators control the domains
listed thereon. This may be one of those cases.
ea...@optonline.net
<spamt...@library.lspace.org.invalid> wrote:
> In <272e6a6b-a043-4083-8768-3e624275e...@a1g2000hsb.googlegroups.com>, on
> 06/06/2008
> at 01:12 AM, ea...@optonline.net said:
>
> >I tried calling Verizon to see if they could help determine the
> >reason for this listing but they said the PTR is controlled by
> >netriplex.
>
> Sure looks like verizon to me:
>
> nslookup -type=any 179.182.236.68.in-addr.arpa
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> 179.182.236.68.in-addr.arpa name = monolith.veteransadvantage.com
>
> Authoritative answers can be found from:
> 182.236.68.in-addr.arpa nameserver = ns4.verizon.net
> 182.236.68.in-addr.arpa nameserver = ns1.bellatlantic.net
> 182.236.68.in-addr.arpa nameserver = ns2.verizon.net
> 182.236.68.in-addr.arpa nameserver = ns2.bellatlantic.net
>
> >Any clues why we might be blocked and what I should try to diagnose or
> >resolve it?
>
> doesn't show any hits? Have you tried asking your customers?
>
> --
> Shmuel (Seymour J.) Metz, truly insane Spews puppet
> <http://patriot.net/~shmuel>
>
> I reserve the right to publicly post or ridicule any abusive
> E-mail. Reply to domain Patriot dot net user shmuel+news to contact
>
> --
> Comments posted to news.admin.net-abuse.blocklisting
> are solely the responsibility of their author. Please
> read the news.admin.net-abuse.blocklisting FAQ at
> http://www.blocklisting.com/faq.htmlbefore posting.
I only see our server listed on APEWS. I'm new to this so when you say
"Have you tried asking your customers?" I've been contacting the email
server owners to see if they can give me assistance. From the reading
I've done it sounds like this might be a case of us being in a spammer
IP block. There are about 4 email domains that are still refusing our
mail so we have whittled it down. Is using a Smart Host a good
recommendation? Any other recommendations?
E-Mail Sent to this address will be added to the BlackLists
> I only see our server listed on APEWS.
As you said in your first post,
> Oooops 68.236.182.179 is currently listed in APEWS :-(
>
> Entry matching your Query: E-271593
> 68.236.128.0/18
--^^^^^^^^^^^^^^^
That listing is for 68.236.128.0/18 (16384 IP addresses)
{Which is part of 68.236.0.0/14 (IP 262144 addresses)
Direct Allocation from ARIN to VRIS / Verizon Internet Services
/ verizon.net / bellatlantic.net / gnilink.net
So, unless you are using 16k IP addresses on your server,
and no one else is using those, ....
{The IPs belong to Verizon, you are just renting one (or some)}.
Below part of the APEWS record you posted mentions the listing
is for your upstream ISP
> CASE: C-679
> AS19262 US, ISP permits abuse and/or ignores criminal activity
--^^^^^^^
AS19262 is VZGNI-TRANSIT
/ Verizon Internet Services / verizon.net / gnilink.net
APEWS seems to have issues with Verizon, not you specifically.
It is likely that there is nothing you can do about the APEWS
listing; It is also likely that there is no need for you to
do anything about the APEWS listing.
If you are seeing mail being rejected, some of those rejects,
bounces, DSNs, NDRs, ... are likely to mention the reason(s).
In the recent past that IP did apparently did emit some Spam
(and there are apparently have been plenty of other sources
of abuse in that same /24 e.g.
<http://www.projecthoneypot.org/i_6962cedf95daec3c7943eea23c871389>
has two 419 Scams / Spams in the last 3 months from 68.236.182.179,
Associated Harvesters: 65.67.1.219, 80.21.125.190
Some other spamming IPs In The Neighborhood, 68.236.182.28, .30, .33,
.34, .58, .101, .137, .215, .224, .229, ...
I have also seen some of the IPs in same /24 as your IP
in the CBL recently (which likely means unmanaged servers
using IPs near the one you use, under the control of BotNet
Spammers, ....)
You also mentioned UCEprotect, at a glance, they have seen
a few SpamTrap hits this week from the 68.236.128.0/18 CIDR
the IP you are using is in.
So, in some cases, messages from your IP may be trusted by
the collective feeling about the neighbors your ISP has
assigned to IPs near you, and how they have behaved in the
past (and are currently behaving).
If recipients of your messages really want / need / expect
those messages from you, they will find a way to get them,
if not, they likely don't really want your messages that badly.
--
E-Mail Sent to this address <Blac...@Griffin-Technologies.net>
will be added to the BlackLists.
Shmuel (Seymour J.) Metz
06/09/2008
at 12:39 PM, ea...@optonline.net said:
>I only see our server listed on APEWS.
The text you quoted included "68.236.128.0/18"; that's 16 Li IP addresses,
a lot more than just one server.
>From the reading I've done it sounds like this might be a case of
>us being in a spammer IP block.
Yes.
>Is using a Smart Host a good recommendation?
>Any other recommendations?
Research any new IP address before you accept it. Look in
news.admin.net-abuse.sightings and also check with completewhois.
--
Shmuel (Seymour J.) Metz, truly insane Spews puppet
<http://patriot.net/~shmuel>
I reserve the right to publicly post or ridicule any abusive
E-mail. Reply to domain Patriot dot net user shmuel+news to contact
me. Do not reply to spam...@library.lspace.org