NUXI
@amazonaws.com
 from:
koitsu 
| ORDB related?
Cookies to donuts they still had ORDB in their RBL setup. |
|
claco
join:2002-09-29
Tallmadge, OH | I was thinking the same thing myself. I took it out of my postfix a long time ago...but a guy I work with got bit by it last night. |
|
sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Netcong, NJ
| reply to NUXI
said by NUXI :
Cookies to donuts they still had ORDB in their RBL setup.
We had a customer with that problem yesterday... I found info that ORDB disappeared quite some time ago, but I had no luck finding an announcement that they had recently set things up to respond positively to every query. I'd like to pass that info on to the customer... |
|
ross
join:2000-08-16
 ·Digizip
edit:
March 26th, @03:13PM
| reply to NUXI
said by NUXI :
Cookies to donuts they still had ORDB in their RBL setup.
WTF is ORDB? I had a reference and link to that in the rejection message I got from the mail servers I have been sending to (non-AT&T).
----------------------------
OK, I found out what ordb.org WAS. This DNS Blacklist service "org" went offline two years ago. Why is its disappearance just now causing trouble? What changed? Something is totally screwing up all my e-mail accounts. All incoming mail is labeled as SPAM. |
|
koitsu
Premium
join:2002-07-16
Mountain View, CA
| reply to sporkme
You should show that customer the attitude of ORDB users, and how utterly bizarre their attitudes are. No other way to see it: complete and total power trippin'.
Moral of the story: be VERY CAUTIOUS when it comes to picking RBLs.
--
Making life hard for others since 1977.
I speak for myself and not my employer/affiliates of my employer. |
|
koitsu
Premium
join:2002-07-16
Mountain View, CA
edit:
March 26th, @03:26PM
| reply to ross
said by ross :WTF is ORDB? I had a reference and link to that in the rejection message I got from the mail servers I have been sending to (non-AT&T). Post said rejection message, with timestamps! This is solid proof that AT&T mail server administrators are not keeping up on which RBLs are mismanaged or even offline, not to mention are relying on public RBLs!
Regarding what ORDB is: it's a now-defunct blacklisting (RBL/DNSBL) service for mail servers. Read.
Every time a connection is made to an SMTP server using an RBL, a DNS lookup of the IP of the SMTP client is performed against a specific DNS server to see if it's considered "bad". "Bad" means possibly a compromised machine, an open relay, has been sending viruses, whatever -- it's up to the operators of the RBL to define what's bad and what isn't.
For example, if an SMTP client of 5.6.7.8 connected to your mail server and you were using an RBL, you'd try to do a DNS lookup of "8.7.6.5.dnsbl.server.com.".
If that lookup is successful (usually returning a PTR record like 127.0.0.2 to say "yes, that client connecting has been known to send spam/has trojans/whatever"), the mail server automatically rejects any further conversation with the client. Meaning: your mail gets *rejected*. You'll get what appears to be a bounceback, usually with a 5xx SMTP response.
ORDB has been offline since December 2006. However, despite their servers not answering RBL queries, the argument is that the "amount of network traffic still going there was substantial".
So instead of removing their public DNS record for ORDB DNS lookups (relays.ordb.org), they decided to *re-enable the RBL service* and start returning "yes, that IP is bad" for *every single IP looked up*.
I'm sure you can imagine what a horrible, *HORRIBLE* idea this was -- and now you're seeing the results of it.
If you're using your ISP's mail servers and seeing said rejection behaviour, call them IMMEDIATELY and report this problem. Do not take "Sir it sounds like your Outlook client may be incorrectly configured" Tier 1 rebuttals -- ask to speak to Tier 2 or Tier 3 and skip the garbage. This indicates a problem with their mail servers, and not you.
--
Making life hard for others since 1977.
I speak for myself and not my employer/affiliates of my employer. |
|
cine0n
join:2003-03-11
Santa Monica, CA
| reply to NUXI
This appears to be hitting a lot of companies. This was sent be the admin of the company I work for:
"Today, a once-widely used Blacklisting service, Open Relay Database (ORDB), that stopped updating their database last year, enforced the deprecation of their service by blacklisting the entire world. Our mail servers check for open mail relays in an effort to control inbound spam and spam relaying. In essence, because ORDB blacklisted everyone, our mail servers were told that ANY email server trying to send mail to us was an Open Mail Relay, so we rejected the message and bounced it back to the sender. We've since updated our server configs to look to other services and get mail moving." |
|
ross
join:2000-08-16 | reply to koitsu
Thank you koitsu! That is the explanation I was looking for. Unfortunately, I discarded all the bounced e-mail with the ordb.org links and the 5xx error codes earlier today.
Your response is much appreciated. |
|
