[Dshield] Submitting DSHIELD reports, Dyn IP's and MX hosts

Dave fb0xwp802 at sneakemail.com
Tue Aug 2 15:35:09 GMT 2005



I've had a few failures recently when submitting reports, so I did a little checking and found this kind of interesting...  :-(

There are 5 MX records for dshield.org.  Which return only 3 discrete IP addresses:
  MX-5: 65.173.218.116 (mail2.dshield.org)
  MX-10: 65.173.218.113 (iceman12-ext.giac.net)
  MX-20: 207.36.86.169 (mail2.euclidian.com)

Now, since some of us have started sending mail directly to dshield and spamcop, bypassing our local ISP smarthost to improve performance...

I found the 2nd choice MX (iceman12-ext.giac.net) is blocking mail from Dynamic IP blocks:

  dave at els1:~$ telnet mail2.dshield.org 25
  Trying 65.173.218.113...
  Connected to iceman12-ext.giac.net.
  Escape character is '^]'.
  220 rblsmtpd.local
  helo its-me
  250 rblsmtpd.local
  mail from: <my_email>
  250 rblsmtpd.local
  rcpt to: reports at dshield.org
  451 Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?<my_dyn_ip>
  data
  451 Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?<my_dyn_ip>
  quit
  221 rblsmtpd.local
  Connection closed by foreign host.

The other 2 MX's accept my mail.  Only the 2nd choice is rejecting.  Could someone rectify the situation?  Or are we going to be forced to use our ISP smarthosts?  


regards,

/dave




--------------------------------------
Protect yourself from spam, 
use http://sneakemail.com


More information about the list mailing list