sign-'n'-SPAM

[VAXman-]

Quick note to those here who have had issues with my disdain for the myriad
sign-'n'-SPAM email services. (ie. Google/Gmail, Yahoo, Hotmail, etc.) One
of my clients has been using Googlemail as a clearinghouse of their business
email. Yesterday, I was requested to look into why their customers were NOT
getting most of the emails they were sending. Everything looked OK on their
Alphas and their emails were clearing the queues. Odd! So, I sent email to
myself from their system. I never received it. When I checked my logs, it
was apparent the email was being blocked because the emailer IP is listed on
an RBL(s). In fact, it turns out that several of Google's mailers' IPs have
been blacklisted!

mail-ua0-f170.google.com is on list DNSBL.SORBS.NET
mail-ua0-f172.google.com is on list DNSBL.SORBS.NET
mail-ua0-f173.google.com is on list DNSBL.SORBS.NET
mail-ua0-f174.google.com is on list DNSBL.SORBS.NET
mail-ua0-f179.google.com is on list DNSBL.SORBS.NET
mail-ua0-f180.google.com is on list DNSBL.SORBS.NET
mail-ua0-f181.google.com is on list DNSBL.SORBS.NET

Checking by using mxtoolbox.com confirms that most of these are on three or
more RBLs. Those listed above are the ones affecting my client.

--
VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)ORG

I speak to machines with the voice of humanity.

[John E. Malmberg]

Just about all ISPs and popular e-mail systems like GMAIL, are listed
somewhere on DNSBL.SORBS.NET.

DNSBL.SORBS.NET is a aggregate of most of the SORBS.NET blocking lists
including ones that possibly should not be used by production mail servers.

There are instructions on the the SORBS.NET website on what each
individual SORBS.NET blocking list contains.

And yes, this has happened a lot where the mail server administrator did
not read or understand the web page below or followed the wrong advice
from a probably sarcastic post returned by a search engine.

http://www.sorbs.net/using.shtml

Generally the dul.dnsbl.sorbs.net is useful to use, and so are the ones
that are confirmed to be insecure. (It used to be called
duhl.dnsbl.sorbs.net)

The insecure lists generally duplicates the more popular spamhaus lists.

Regards,
-John

[David Froble]

Can return receipt when read be turned on as the default?

I use gmail for outgoing emails, and I have to rename .ZIP to .ZIPP or soemthing
to get them to go through. That's just unacceptable. But, I'm getting what I
paid for ...

[Stephen Hoffman]

On 2016-08-25 17:26:06 +0000, David Froble said:

> Can return receipt when read be turned on as the default?

Return reciepts can be useful in isolation and for some folks and some
servers and usages, but that's a very bad idea in the general Internet.

Spammers already use remote images and beacons and whatever they can
(and read reciepts!), to try to determine when their messages are read,
and which recipient email is real.

Best to leave that disabled for most use cases, for those mail clients
that support read receipts.


--
Pure Personal Opinion | HoffmanLabs LLC

[David Froble]

I was just thinking of a way for senders to determine the email got to the
reciepient. But you're right, one more thing to exploit.

[David Turner]

Why, considering how easy and cheap it is to setup a mailserver, would
ANYONE use google mail services.
We use Axigen. Czech-made and a rock solid corporate mailserver on
Redhat. a no brainer
A $500 server with a big raid disk is all you need. Google keeps all
those emails you send also. (encrypted yes but not completely private)

[Kerry Main]

> -----Original Message-----
> From: Info-vax [mailto:info-vax...@rbnsn.com] On
> Behalf Of David Turner via Info-vax
> Sent: 26-Aug-16 9:42 AM
> To: info...@rbnsn.com
> Cc: David Turner <dtu...@islandco.com>
> Subject: Re: [Info-vax] sign-'n'-SPAM
>
> Why, considering how easy and cheap it is to setup a
> mailserver, would
> ANYONE use google mail services.
> We use Axigen. Czech-made and a rock solid corporate
> mailserver on
> Redhat. a no brainer
> A $500 server with a big raid disk is all you need.
Google
> keeps all
> those emails you send also. (encrypted yes but not
> completely private)
>

[snip]

While I have a Gmail account or two, it is not because I
want to. If you have an Android phone, you must have a
Gmail account (no option).

Big issue is that when you accept the T's and C's for any
Gmail account, it is amazing what privacy you give up.

May not be an issue for many today, and one could argue
this is the hidden cost of free mail, but I would
encourage folks to actually read the Google T's and C's:
(a few extracts)

https://www.google.com/policies/terms/ (note "and those we
work with" in terms of Google info sharing subsets
(slippery slope) of your information)

Extracts-
"When you upload, submit, store, send or receive content
to or through our Services, you give Google (and those we
work with) a worldwide license to use, host, store,
reproduce, modify, create derivative works (such as those
resulting from translations, adaptations or other changes
we make so that your content works better with our
Services), communicate, publish, publicly perform,
publicly display and distribute such content."

"Our automated systems analyze your content (including
emails) to provide you personally relevant product
features, such as customized search results, tailored
advertising, and spam and malware detection. This analysis
occurs as the content is sent, received, and when it is
stored."

"If you have a Google Account, we may display your Profile
name, Profile photo, and actions you take on Google or on
third-party applications connected to your Google Account
(such as +1's, reviews you write and comments you post) in
our Services, including displaying in ads and other
commercial contexts."

Welcome to the new world.


Regards,

Kerry Main
Kerry dot main at starkgaming dot com

[Arne Vajhøj]

On 8/26/2016 9:42 AM, David Turner wrote:
> Why, considering how easy and cheap it is to setup a mailserver, would
> ANYONE use google mail services.
> We use Axigen. Czech-made and a rock solid corporate mailserver on
> Redhat. a no brainer
> A $500 server with a big raid disk is all you need. Google keeps all
> those emails you send also. (encrypted yes but not completely private)

Hardware and software is cheap.

But managing that mail server cost money.

Arne

[John Santos]

In article <mailman.0.1472226061.3...@rbnsn.com>,
kemain...@gmail.com says...

Sounds like if JK Rowling or her publisher has a gmail account
that she uses to send the final draft of her next Harry Potter
novel to her editor, Google would be claiming world-wide
publishing, translation and movie rights to it.

Nice work if you can get it.

--
John Santos
Evans Griffiths & Hart, Inc.

[David Froble]

Hi John, hope you're well ...

If a google would try such a stunt, the lawyers would get rich, and the fallout
would be a death sentence for google. There would be enough bad press for many
if not all to distrust them.

Then again, P.T. Barnum just might be right, and nobody would care ....