Re: [Assp-test] DNSBL failures on good IPs

[Paul H. <du...@sh...>]

Fritz Borgstedt wrote:
> Has anybody else such a problem? I cannot see anything like that in my
> installations.
> Is there a pattern to see in  the IPs involved?

Here's a good way to test this. Email something like 
fsd...@us.... The Domino (SMTP) server will respond with an 
"Unknown User" email. That email comes from an IP that DNSBL is marking 
as bad, even though it is not listed.

RBLServiceProvider is set to 
zen.spamhaus.org|bl.spamcop.net|safe.dnsbl.sorbs.net

Both sorbs.net and spamhaus.org are reporting the IP as bad, even though 
  with their online service the IP is not listed.

Nov-3-08 20:20:05 Connected: 32.97.110.149:36192 -> 192.168.1.91:25 -> 
192.168.1.91:125
Nov-3-08 20:20:05 Commencing RBL checks on 32.97.110.149
Nov-3-08 20:20:06 id-61605-03858 [DNSBL] 32.97.110.149 <> to: 
us...@sh... [monitoring] (DNSBL: failed, 32.97.110.149 listed 
by(safe.dnsbl.sorbs.net->207.69.131.9; zen.spamhaus.org->207.69.131.10; ))
Nov-3-08 20:20:06 id-61605-03858 [BombRaw] 32.97.110.149 <> to: 
us...@sh... [scoring] (BombRaw 'Subject: DELIVERY FAILURE')
Nov-3-08 20:20:06 id-61605-03858 32.97.110.149 <> to: 
us...@sh... PB-Message-Score is 20, added 20 (BombRaw: 
'Subject: DELIVERY FAILURE')
Nov-3-08 20:20:06 id-61605-03858 32.97.110.149 <> to: 
us...@sh...  Bayesian Check - Prob: 0.00000 => ham
Nov-3-08 20:20:06 id-61605-03858 [MessageOK] 32.97.110.149 <> to: 
us...@sh... MESSAGE OK
Nov-3-08 20:20:06 Disconnected: 32.97.110.149