[Dshield] SORBS question

Stasiniewicz, Adam stasinia at msoe.edu
Sun Aug 27 22:42:05 GMT 2006


Looks like Bellsouth's email server got itself listed on SORBS.  Looks
like a user of that server sent a message to one of the SORBS spam trap
addresses.  Your best bet is to report this to Bellsouth
customer/technical support.  They will (hopefully) figure out what user
sent mail to the SORBS spam trap, block that user, and request a removal
from SORBS.

You can also request the server that is filtering based on SORBS to add
the Bellsouth server to its whitelist.  But this is more of a workaround
than a fix.

Adam Stasiniewicz

-----Original Message-----
From: list-bounces at lists.dshield.org
[mailto:list-bounces at lists.dshield.org] On Behalf Of
dshield.org at keithbergen.com
Sent: Sunday, August 27, 2006 4:43 PM
To: 'General DShield Discussion List'
Subject: [Dshield] SORBS question

Does anybody have any experience with SORBS? This is my first time
experiencing a block by an ISP using SORBS.

I get a message like this. How can I stop this? I have forwarded it to
Bellsouth already, and have had a friend forward it to the ISP that
maintains the list that I'm sending to. Is there anything else that I
be doing?


-----Original Message-----
From: Mail Administrator <Postmaster@ > [mailto:"PostmasterDomain] 
Sent: Sunday, August 27, 2006 5:09 PM
To: [my email address]
Subject: Mail System Error - Returned Mail

.net 007: This e-mail message was undeliverable due to the
following reason:

.net 018: Each of the following recipients were rejected by a
destination mail system.

Note: The reasons given by the destination mail system are included
to help you determine why each recipient was rejected.

Attempt to resend, or contact the recipient by alternate means to let
them know about the issue.

    Recipient: <[my mailing list]>
    Reason:    5.3.0 <[my mailing list]>... Message from
rejected - see http://sorbs.net/lookup?


SANS Network Security 2006 - Las Vegas NV October 1st-9th.
Wide selection of 1-6 Day Courses. Top Instructors!  

Details: isc.sans.org/clickcount.php?ad=1
(use Brochurcode "ISC")

"Best IT Security return on Investment" (Mario Chiock, Schlumberger)

More information about the list mailing list