Re: The other side of spam

[Robert P. <RPr...@As...>]

     Before I get into details, I'll state my hypothesis:

        Brighthope has a problem with Simplicato, not with
        anti-spam software.

     Have you discovered Senderbase?  It can be a very helpful resource.

        http://www.senderbase.org/search?searchString=207.99.47.53

shows this IP address on no blacklists (currently).  As has already been 
pointed out, DCC, Razor and Pyzor operate by filtering based on a 
checksum or hash of the message.  I'm not as familiar with DCC, but in 
the cases of Razor and Pyzor, messages are nominated for spam status by 
individual end users.  This doesn't seem likely in your case.

http://groups.google.com/groups?group=news.admin.net-abuse.sightings

, another very useful resource, shows no occurrences of the string 
brighthope

http://groups.google.com/groups?q=brighthope&meta=group%3Dnews.admin.net-abuse.sightings

and the hits for simplicato don't seem relevant (3 are about messages 
received at (rather the transmitted from) simplicato and the remaining 
one was transmitted from a different address at simplicato - at
http://forum.spamcop.net/forums/lofiversion/index.php/t2220.html
you can a wlandman (from simplicato?) resolving a problem at this 
address).

     So, having checked with the usual suspects, I would start looking 
elsewhere.  Some internal problem at Simplicato or a communication 
between Simplicato's machines and Brighthope's seems like a logical next 
candidate.  A virus infection in a Simplicato or Brighthope machine 
might be a possible cause.  There are probably many other possible 
causes, but these are what pop immediately to my mind.

                                                          best of luck,

                                                             Robt. P.

> I am a volunteer network admin at Bright Hope, International, a
> non-profit org whose mail domain (mail.brighthope.org) was recently
> blacklisted as spamming.  We do not send spam, but do communicate with
> our constituents via email newsletters or project-specific email
> broadcasts.  In either case, the volume of email we send is usually to
> less than 100 recipients.  However, mail.brighthope.org is hosted by
> Simplicato.com, a web- and email-hosting service that also sends many
> thousand other, unrelated messages thru the same server that we are
> assigned.
> 
> The Monday before Thanksgiving, the president of Bright Hope sent a
> message to about 85 constituents.  Shortly thereafter, he received
> notification thru various alternate channels (phone calls, his personal
> email on AOL) that constituents were unable to reply to or contact Bright
> Hope via email.  All received an automated reply indicating their email
> was blocked by SpamCop. SpamCop's blacklisting continued for 48 hours,
> but some email sent never reached brighthope.org mail accounts.
> 
> While working thru this, we discovered that Pyzor, Razor and other
> databases were also used to blacklist spam.  Apparently, many of these
> alternate blacklisting database systems, however, maintain the
> blacklisted domain names such that blocking continues until someone
> attempts to appeal or counteract or whitelist previously blacklisted
> names.
> 
> Being unfamiliar with how Pyzor functions, I am inquiring whether
> mail.brighthope.org (207.99.47.53) may be in your blacklist and if so,
> how we may appeal to take it out.
> 
> Thank you for your consideration.
> 
> Bob Biegon
> 
> 
> 
> 
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://productguide.itmanagersjournal.com/
> _______________________________________________ pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users