[volunteers] Mail was disabled for subscribers Jon Masters and Rodney Crater

[Rick Moen]

[Jon, you're being CCed to explain the disappearance of your
svlug at lists.svlug.org subscription three weeks ago, and to invite you
back.  See http://lists.svlug.org/lists/listinfo/svlug for subscription
info.

Rodney, you're being CCed to explain why your mail delivery for the same
list is currently disabled, and to detail our efforts to fix the problem.]



Attached are two notices involving cranky DNS blocklists that,
respectively, recently didn't like our IP address but no longer does,
and currently doesn't like it. 

The first, three weeks back, caused subscriber Jon Masters to be dropped from
svlug at lists.svlug.org:  DNS blocklist "UCEprotect" of Germany.  Root cause
_appears_ to have been our brief lack of reverse DNS, three weeks ago -- 
subsequently fixed.  

Checking http://www.uceprotect.net/en/rblcheck.php?ipr=157.22.20.227 
today gets these results:

  Spam Database Query

  Actual Status for 157.22.20.227 at UCEPROTECT-Network:

  UCEPROTECT-Network Level 1:
  IP 157.22.20.227 is NOT listed at UCEPROTECT Level 1

  UCEPROTECT-Network Level 2:
  Network 157.22.20.0/24 is NOT listed at UCEPROTECT Level 2

  UCEPROTECT-Network Level 3:
  Network 157.22.0.0/16 is NOT listed at UCEPROTECT Level 3

  DNS-Status:
  Reverse DNS (PTR) exists and claimes to be: mail.svlug.org

  Forward DNS for mail.svlug.org is: 157.22.20.227

  DNS ist consistent.

  Absolutely perfect - you belong to the elite of the Internet.
  There are not even traces of Abuse in the entire Class B range.
  Congratulation to you and also to your Provider.
  There is no risk to end up in UCEPROTECT-Lists at this time.

It's nice to know that our DNS "ist consistent".  I'll have to remember
that.  ;->  (BTW, http://www.dnsstuff.com/tools/ip4r.ch?ip=157.22.20.227
comes up very clean on all tested DNS blocklists that are reachable --
which is not surprising, as we run a clean operation.)


The second notice is from today, notifying us that mail delivery to
Rodney Crater is being disabled, likewise for "excessive bounces", the
most recent being from mail1.nwicc.edu, saying as explanation only that
"157.22.20.227 has been blocked by Spam Deflector".

DNS blocklists _usually_ cite a URL you can visit to look up the root
cause of blacklisting.[1]  Unfortunately, none is given here.  I'm guessing
that the Spam Deflector in question is Mail Deflector, Inc.'s filtering
software for MTAs.  http://www.maildeflector.net/faq.php says that the
company's product has both a public blacklist database and a
site-specific private blacklist database.

It's difficult to know more without a clue about why Spam Deflector
dislikes our IP.  I've sent a query via the 
http://www.maildeflector.net/support.php CGI to the company, and a
second query via http://www.maildeflector.com/whywasirefused.php -- which
might be useful if we're in the public database, but probably not the
private one.  Rodney, your inquiry with Northwest Iowa Community College
IT Department might therefore also be useful.

[1] It's in their interest to do this, to mitigate the effects of false
positives for their customers.  I'm getting the vibe that Mail
Deflector, Inc. might be a bit new to this gig, as the omission cited
seems a bit unprofessional.



----- Forwarded message from mailman-owner at lists.svlug.org -----

From: mailman-owner at lists.svlug.org
To: svlug-owner at lists.svlug.org
Date: Mon, 11 Dec 2006 11:13:15 -0800
Subject: [Mailman-owner] Bounce action notification

This is a Mailman mailing list bounce action notice:

    List:       svlug
    Member:     jonathan at jonmasters.org
    Action:     Subscription disabled.
    Reason:     Excessive or fatal bounces.
    


The triggering bounce notice is attached below.

Questions? Contact the Mailman site administrator at
mailman-owner at lists.svlug.org.

From: Mail Delivery System <Mailer-Daemon at svlug.org>
To: svlug-bounces+jonathan=jonmasters.org at lists.svlug.org
Subject: Mail delivery failed: returning message to sender
Date: Mon, 11 Dec 2006 11:13:12 -0800

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  jonathan at jonmasters.org
    SMTP error from remote mailer after RCPT TO:<jonathan at jonmasters.org>:
    host mx1.jonmasters.org [72.29.103.172]: 550-X-Warning:
    157.22.20.227 is listed at dnsbl-1.uceprotect.net (127.0.0.2:
    550-Sorry 157.22.20.227 is Level 1 listed at UCEPROTECT-NETWORK. See
    550 http://www.uceprotect.net/rblcheck.php?ipr=157.22.20.227)

------ This is a copy of the message, including all the headers. ------

Return-path: <svlug-bounces+jonathan=jonmasters.org at lists.svlug.org>
Received: from localhost ([127.0.0.1]:43545 helo=svlug.org)
	by svlug.org with esmtp (Exim 4.44 #1)
	id 1GtqaM-0004wz-4E
	for <jonathan at jonmasters.org>; Mon, 11 Dec 2006 11:13:10 -0800
Received: from typhoon.he.net ([64.62.229.2]:39514)
	by svlug.org with smtp (Exim 4.44 #1) id 1Gtqa9-0004wr-E7
	for <svlug at lists.svlug.org>; Mon, 11 Dec 2006 11:13:08 -0800
Received: from liam.billschoolcraft.com ([71.141.72.46]) by typhoon.he.net for
	<svlug at lists.svlug.org>; Mon, 11 Dec 2006 11:12:43 -0800
Date: Mon, 11 Dec 2006 11:12:00 -0800 (PST)
From: Bill-Schoolcraft <bill at wiliweld.com>

[snip Bill's post.]

_______________________________________________
svlug mailing list
svlug at lists.svlug.org
http://lists.svlug.org/lists/listinfo/svlug


_______________________________________________
Mailman-owner mailing list
Mailman-owner at lists.svlug.org
http://lists.svlug.org/lists/listinfo/mailman-owner


----- End forwarded message -----
----- Forwarded message from mailman-owner at lists.svlug.org -----

From: mailman-owner at lists.svlug.org
To: svlug-owner at lists.svlug.org
Date: Wed, 27 Dec 2006 02:33:48 -0800
Subject: [Mailman-owner] Bounce action notification

This is a Mailman mailing list bounce action notice:

    List:       svlug
    Member:     rcrater at nwicc.edu
    Action:     Subscription disabled.
    Reason:     Excessive or fatal bounces.
    


The triggering bounce notice is attached below.

Questions? Contact the Mailman site administrator at
mailman-owner at lists.svlug.org.

From: Mail Delivery System <Mailer-Daemon at svlug.org>
To: svlug-bounces+rcrater=nwicc.edu at lists.svlug.org
Subject: Mail delivery failed: returning message to sender
Date: Wed, 27 Dec 2006 02:33:46 -0800

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  rcrater at nwicc.edu
    SMTP error from remote mailer after RCPT TO:<rcrater at nwicc.edu>:
    host mail1.nwicc.edu [207.28.223.2]: 550 5.7.1 157.22.20.227 has been blocked by Spam Deflector

------ This is a copy of the message, including all the headers. ------

Return-path: <svlug-bounces+rcrater=nwicc.edu at lists.svlug.org>
Received: from localhost ([127.0.0.1]:33627 helo=svlug.org)
	by svlug.org with esmtp (Exim 4.44 #1)
	id 1GzW6T-0005OE-TJ
	for <rcrater at nwicc.edu>; Wed, 27 Dec 2006 02:33:45 -0800
Received: from champ.thecoop.net ([216.218.255.169]:54510)
	by svlug.org with esmtps 
	(Cipher TLS-1.0:DHE_RSA_AES_256_CBC_SHA:32) (Exim 4.44 #1)
	id 1GzW5u-00053w-PT
	for <svlug at lists.svlug.org>; Wed, 27 Dec 2006 02:33:13 -0800
Received: from [192.168.1.6] (c-24-6-242-246.hsd1.ca.comcast.net
	[24.6.242.246]) (authenticated bits=0)
	by champ.thecoop.net (8.13.8/8.13.8) with ESMTP id kBRAWxjV026749
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <svlug at lists.svlug.org>; Wed, 27 Dec 2006 02:33:00 -0800
Message-ID: <45924BDC.8090900 at drewb.com>
Date: Wed, 27 Dec 2006 02:33:00 -0800
From: Drew Bertola <drew at drewb.com>

[snip Drew's post.]

_______________________________________________
svlug mailing list
svlug at lists.svlug.org
http://lists.svlug.org/lists/listinfo/svlug


_______________________________________________
Mailman-owner mailing list
Mailman-owner at lists.svlug.org
http://lists.svlug.org/lists/listinfo/mailman-owner


----- End forwarded message -----