Re: ORDB related? in http://www.dslreports.com/forum/r20231658 en Fri, 25 Jul 2008 18:47:52 EDT Fri, 25 Jul 2008 18:47:52 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20231658 ross : Thank you koitsu! That is the explanation I was looking for. Unfortunately, I discarded all the bounced e-mail with the ordb.org links and the 5xx error codes earlier today.

Your response is much appreciated.]]> http://www.dslreports.com/forum/remark,20231658 Wed, 26 Mar 2008 22:11:33 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20231442 cine0n : This appears to be hitting a lot of companies. This was sent be the admin of the company I work for:

"Today, a once-widely used Blacklisting service, Open Relay Database (ORDB), that stopped updating their database last year, enforced the deprecation of their service by blacklisting the entire world. Our mail servers check for open mail relays in an effort to control inbound spam and spam relaying. In essence, because ORDB blacklisted everyone, our mail servers were told that ANY email server trying to send mail to us was an Open Mail Relay, so we rejected the message and bounced it back to the sender. We've since updated our server configs to look to other services and get mail moving."]]> http://www.dslreports.com/forum/remark,20231442 Wed, 26 Mar 2008 21:33:04 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20229326 koitsu :
said by ross See Profile :

WTF is ORDB? I had a reference and link to that in the rejection message I got from the mail servers I have been sending to (non-AT&T).
Post said rejection message, with timestamps! This is solid proof that AT&T mail server administrators are not keeping up on which RBLs are mismanaged or even offline, not to mention are relying on public RBLs!

Regarding what ORDB is: it's a now-defunct blacklisting (RBL/DNSBL) service for mail servers. Read.

Every time a connection is made to an SMTP server using an RBL, a DNS lookup of the IP of the SMTP client is performed against a specific DNS server to see if it's considered "bad". "Bad" means possibly a compromised machine, an open relay, has been sending viruses, whatever -- it's up to the operators of the RBL to define what's bad and what isn't.

For example, if an SMTP client of 5.6.7.8 connected to your mail server and you were using an RBL, you'd try to do a DNS lookup of "8.7.6.5.dnsbl.server.com.".

If that lookup is successful (usually returning a PTR record like 127.0.0.2 to say "yes, that client connecting has been known to send spam/has trojans/whatever"), the mail server automatically rejects any further conversation with the client. Meaning: your mail gets *rejected*. You'll get what appears to be a bounceback, usually with a 5xx SMTP response.

ORDB has been offline since December 2006. However, despite their servers not answering RBL queries, the argument is that the "amount of network traffic still going there was substantial".

So instead of removing their public DNS record for ORDB DNS lookups (relays.ordb.org), they decided to *re-enable the RBL service* and start returning "yes, that IP is bad" for *every single IP looked up*.

I'm sure you can imagine what a horrible, *HORRIBLE* idea this was -- and now you're seeing the results of it.

If you're using your ISP's mail servers and seeing said rejection behaviour, call them IMMEDIATELY and report this problem. Do not take "Sir it sounds like your Outlook client may be incorrectly configured" Tier 1 rebuttals -- ask to speak to Tier 2 or Tier 3 and skip the garbage. This indicates a problem with their mail servers, and not you.

--
Making life hard for others since 1977.
I speak for myself and not my employer/affiliates of my employer.]]> http://www.dslreports.com/forum/remark,20229326 Wed, 26 Mar 2008 15:21:23 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20229271 koitsu : You should show that customer the attitude of ORDB users, and how utterly bizarre their attitudes are. No other way to see it: complete and total power trippin'.

Moral of the story: be VERY CAUTIOUS when it comes to picking RBLs.
--
Making life hard for others since 1977.
I speak for myself and not my employer/affiliates of my employer.]]> http://www.dslreports.com/forum/remark,20229271 Wed, 26 Mar 2008 15:12:40 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20229096 ross :
said by NUXI :

Cookies to donuts they still had ORDB in their RBL setup.
WTF is ORDB? I had a reference and link to that in the rejection message I got from the mail servers I have been sending to (non-AT&T).
----------------------------

OK, I found out what ordb.org WAS. This DNS Blacklist service "org" went offline two years ago. Why is its disappearance just now causing trouble? What changed? Something is totally screwing up all my e-mail accounts. All incoming mail is labeled as SPAM.]]> http://www.dslreports.com/forum/remark,20229096 Wed, 26 Mar 2008 14:41:39 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20228228 sporkme :
said by NUXI :

Cookies to donuts they still had ORDB in their RBL setup.
We had a customer with that problem yesterday... I found info that ORDB disappeared quite some time ago, but I had no luck finding an announcement that they had recently set things up to respond positively to every query. I'd like to pass that info on to the customer...]]> http://www.dslreports.com/forum/remark,20228228 Wed, 26 Mar 2008 12:07:21 EDT Re: ORDB related? http://www.dslreports.com/forum/remark,20227819 claco : I was thinking the same thing myself. I took it out of my postfix a long time ago...but a guy I work with got bit by it last night.]]> http://www.dslreports.com/forum/remark,20227819 Wed, 26 Mar 2008 10:48:08 EDT ORDB related? http://www.dslreports.com/forum/remark,20227668 anon : Cookies to donuts they still had ORDB in their RBL setup.]]> http://www.dslreports.com/forum/remark,20227668 Wed, 26 Mar 2008 10:17:34 EDT