dda
Premium
join:2003-12-29
Bolton, MA
| sccrmhc12.comcast.net being blacklisted by Spamcop
Forgive me if this is old news, but I tried to send email to a friend today and it bounced back with:
quote:
Permanent Failure: 550-rejected_because_204.127.202.56_is_in_a_black_list_at_bl.spamcop.net
So I went over to Spamcop.net and put in that IP address and sure enough:
quote:
Since SpamCop started counting, this system has been reported about 70 times by about 40 users. It has been sending mail consistently for at least 171.2 days. It has been listed for less than 24 hours.
Of course, Spamcop also says:
quote:
However, it should be noted that SpamCop is aggressive and often errs on the side of blocking mail - users should be warned and given information about how their mail is filtered. Ideally they should have a choice of filtering options. Many mailservers can operate with blacklists in a "tag only" mode, which is preferable in many situations.
Oddly enough, SPEWS hasn't blocked it; they are still listing the dynamic IPs but have the main MTAs at level 0.
Looks like the War on Spam just escalated. |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
 ·LINGO
 ·Sprint Mobile Broa..
 ·surpasshosting
 ·Verizon FIOS
| Most of the Comcast's mail servers have been listed by SORBS as sources of spam, though at the moment they aren't listed.
»Spam from Comcast getting worse . . . not better
All of Comcast's servers have SpamCop reports, but sccrmhc12 is the only one that is currently blacklisted by SpamCop. sccrmhc13 was recently blacklisted too.
said by SpamCop.net:
204.127.198.35 is rwcrmhc11.comcast.net
204.127.198.35 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 40 times by about 30 users. It has been sending mail consistently for at least 171.6 days. It has never been listed.
216.148.227.85 is rwcrmhc12.comcast.net
216.148.227.85 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 50 times by about 30 users. It has been sending mail consistently for at least 171.6 days. It has never been listed.
204.127.198.39 is rwcrmhc13.comcast.net
204.127.198.39 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 50 times by about 40 users. It has been sending mail consistently for at least 171.6 days. It has never been listed.
204.127.202.55 is sccrmhc11.comcast.net
204.127.202.55 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 60 times by about 30 users. It has been sending mail consistently for at least 171.5 days. It has never been listed.
204.127.202.56 is sccrmhc12.comcast.net
204.127.202.56 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 70 times by about 40 users. It has been sending mail consistently for at least 171.5 days. It has been listed for less than 24 hours.
204.127.202.64 is sccrmhc13.comcast.net
204.127.202.64 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 80 times by about 40 users. It has been sending mail consistently for at least 171.5 days. In the past 30 hours, it has been listed once for a total of 17 hours.
|
|
phungus
join:2002-01-22
Beverly Hills, CA | reply to dda
Re: sccrmhc12.comcast.net being blacklisted by Spa
This has hit me 3x in the last few hours. Great... Guess I need to force the SMTP to one server instead of round robining thru smtp.comcast.net? |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| Good luck. Looks like you're going to have to check the BL pretty regularly though. As of now...
sccrmhc12.comcast.net got removed from the blacklist.
said by SpamCop about sccrmhc12.comcast.net:
204.127.202.56 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 70 times by about 40 users. It has been sending mail consistently for at least 171.8 days. In the past 16 hours, it has been listed once for a total of 13 hours
BUT...
sccrmhc11.comcast.net just got added.
said by SpamCop about sccrmhc11.comcast.net:
204.127.202.55 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 60 times by about 30 users. It has been sending mail consistently for at least 171.8 days. It has been listed for less than 24 hours.
|
|
dda
Premium
join:2003-12-29
Bolton, MA
| reply to phungus
said by phungus  :
Guess I need to force the SMTP to one server instead of round robining thru smtp.comcast.net?
You really only have a few choices:
o Lock your SMTP server to a non-blacklisted one. This will require some monitoring.
o Inform the recipient that their ISP is blacklisting Comcast and if they want to continue to receive email from you, they should ask their ISP to stop.
o Inform Comcast that they have gotten their main MTAs into a blacklist and ask them to take the necessary steps.
o Get another ISP or mail relay to which you can connect.
Personally, I have no desire to be drafted against my will as a Soldier in the War on Spam. I have no tolerance for those who block legitimate mail; their arguments about controlling their own mail servers cut both ways. The fact my email didn't get through is entirely their responsibility (or so they insist) so I will hold them entirely responsible.
To be fair, I have little tolerance for Comcast and its inability to deal with a known and obvious problem, namely zombies. But blocking the legit MTAs doesn't solve that problem, anyway, since the zombies have their own SMTP engines. Dealing with zombies is a hard problem, since it really involves either use education or pissing off a lot of customers who don't understand the details.
Harboring "real" spammers, on the other hand, is a fairly easy problem to solve (barring strange contracts that allow them to spam). If they violate the TOS, they are gone.
To me, the blacklisters are becoming as big a problem as the spammers.  |
|
fantomposter
Phantom Poster
Premium
join:2002-09-21
Independence, OH
| said by dda :
But blocking the legit MTAs doesn't solve that problem
It is not a legit MTA if it is being used to send spam.
Your point is valid (depending upon perspective) if the main MTA's were being blocked because spam was coming from other parts of the network. But that isn't the case here, the MTA's are being blocked by Spamcop because they are the source of spam. |
|
TKJunkMail
Enjoy the sun
Premium
join:2002-03-03
Avalon, NJ | reply to dda
You summed up the situation perfectly. The so-called independent spam police are as big a problem as the spammers. A pox on both their houses. |
|
markd16
Premium
join:2000-12-14
East Stroudsburg, PA
clubs:
| I find the SBL list on www.spamhaus.org to be much more useful then Spamcop. I do not currently use Spamcop as one of my RBL's to check on my company's mail server.
The SBL lists "zombied" or "trojaned" computer, which takes care of alot of the DSL & Cable IP's. You'd be surprised at the volume of zombied computers out there now, too. I see no sense in blocking a whole block, because a few IP's are being abused.
Spamhaus and ORDB are by far the best and most legimate RBL lists
--
WHAT?! |
|
dda
Premium
join:2003-12-29
Bolton, MA
1 edit | reply to fantomposter
said by fantomposter :
It is not a legit MTA if it is being used to send spam.
It is a legit MTA because it is part of the "official" MTAs that Comcast users are supposed to use.
said by Spamcop:
In the past week, this system has:
Been reported as a source of spam less than 10 times
Been detected sending mail to spam traps
Been witnessed sending mail about 19980 times
Less than 10 pieces of spam reported out of almost 20K messages in a week. Yup, that is a good reason to block one of the main MTAs of Comcast cause, you know, those 10 pieces of spam really clog up the Internet. 
Edit: BTW, you might want to check out this thread: »The fine line between SPAM and "service related" to see some of the horrific spam being sent via Comcast. To me, this kind of stuff shows me that some of the anti-spam folks really are zealots and thus why these blacklists operate the way they do. |
|
newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD
| sccrmhc12.comcast.net being blacklisted by Spamcop
said by dda :
Edit: BTW, you might want to check out this thread: »The fine line between SPAM and "service related" to see some of the horrific spam being sent via Comcast. To me, this kind of stuff shows me that some of the anti-spam folks really are zealots and thus why these blacklists operate the way they do.
The MAPS RBL defines spam as:
quote:
An electronic message is "spam" IF: (1) the recipient's personal identity and context are irrelevant because the message is equally applicable to many other potential recipients; AND (2) the recipient has not verifiably granted deliberate, explicit, and still-revocable permission for it to be sent; AND (3) the transmission and reception of the message appears to the recipient to give a disproportionate benefit to the sender.
»mail-abuse.org/standard.html
The argument in the aforementioned thread is that the spam sent by Comcast is NOT service related as Comcast tries to indicate, but is in fact more marketing blather than service related, therefore it is spam . . . and does in fact appear to be so as defined by MAPS, since it DOES give a "disproportionate benefit to the sender".
--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket? |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to dda
For those who are keeping track...
sccrmhc11.comcast.net has been removed.
said by SpamCop about sccrmhc11.comcast.net:
204.127.202.55 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 80 times by about 40 users. It has been sending mail consistently for at least 173.9 days. In the past 2.2 days, it has been listed once for a total of 10 hours
BUT
sccrmhc13.comcast.net has been added.
said by SpamCop about sccrmhc13.comcast.net:
204.127.202.64 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 100 times by about 40 users. It has been sending mail consistently for at least 173.9 days. It has been listed for less than 24 hours.
|
|
Nerdtalker
Working Hard, Or Hardly Working?
Premium,MVM
join:2003-02-18
Tucson, AZ
clubs: | Re: sccrmhc12.comcast.net being blacklisted by Spa
JT, how would I find out what SMTP server I am on? |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs: | It's in your headers. I think Comcast uses a "round robin" approach, so you probably don't use just one. |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to dda
Re: sccrmhc12.comcast.net being blacklisted by Spamcop
sscrmhc13.comcast.net is still listed
said by SpamCop about sccrmhc13.comcast.net:
204.127.202.55 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 100 times by about 40 users. It has been sending mail consistently for at least 174.5 days. It has been listed for less than 24 hours.
AND
rwcrmhc12.comcast.net just got added
said by SpamCop about rwcrmhc12.comcast.net:
216.148.227.85 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 50 times by about 30 users. It has been sending mail consistently for at least 174.5 days. It has been listed for less than 24 hours.
|
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to dda
Re: sccrmhc12.comcast.net being blacklisted by Spa
said by dda :
said by phungus :
Guess I need to force the SMTP to one server instead of round robining thru smtp.comcast.net?
You really only have a few choices:
o Lock your SMTP server to a non-blacklisted one. This will require some monitoring.
I think the "round robin" approach still applies regardless of which smtp server you tell the client to use. So, for example, if you set it to use rwcrmhc11.comcast.net or rwcrmhc13.comcast.net, you still might end up using rwcrmhc12.comcast.net. |
|
SolarPup
IT Geek-Dawg
Premium
join:2002-03-07
The Pound
clubs:
 ·Comcast
·AT&T CallVantage
·Osiris Communicati..
| reply to dda
I just made my own SMTP server with the smtp program that comes with windows 2000/xp, then setup the smarthost for any that block your ip to use smtp.comcast.net.. works much better and no problems 
--
"Gentlemen, I wouldn't trust this overgrown pile of microchips any further than I could throw it. And I don't know if you want to trust the safety of our country to some silicon diode." |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs: | When you use smtp.comcast.net, what shows up in the header? Is it one of the 6 MTAs? |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs:
·LINGO
·Sprint Mobile Broa..
·surpasshosting
·Verizon FIOS
| reply to dda
Re: sccrmhc12.comcast.net being blacklisted by Spamcop
rwcrmhc12.comcast.net has been removed.
said by SpamCop about rwcrmhc12.comcast.net:
216.148.227.85 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 50 times by about 30 users. It has been sending mail consistently for at least 175.5 days. In the past 28 hours, it has been listed once for a total of 9 hours
sccrmhc13.comcast.net has been removed.
said by SpamCop about sscrmhc13.comcast.net:
204.127.202.64 not listed in bl.spamcop.net
Since SpamCop started counting, this system has been reported about 120 times by about 40 users. It has been sending mail consistently for at least 175.5 days. In the past 5.2 days, it has been listed 2 times for a total of 26 hours
rwcrmhc11.comcast.net just got added.
said by SpamCop about rwcrmhc11.comcast.net:
204.127.198.35 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 70 times by about 30 users. It has been sending mail consistently for at least 175.5 days. It has been listed for less than 24 hours.
rwcrmhc13.comcast.net just got added
said by SpamCop about rwcrmhc13.comcast.net:
204.127.198.39 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 70 times by about 40 users. It has been sending mail consistently for at least 175.5 days. It has been listed for less than 24 hours.
sccrmhc11.comcast.net just got added
said by SpamCop about sccrmhc11.comcast.net:
204.127.202.55 listed in bl.spamcop.net (127.0.0.2)
Since SpamCop started counting, this system has been reported about 110 times by about 40 users. It has been sending mail consistently for at least 175.5 days. In the past 3.8 days, it has been listed 2 times for a total of 36 hours
For now, it seems SpamCop is the only blacklist these servers make an appearance on. |
|
draven
Premium,Mod
join:2002-02-20
my bunker
Host:
General Questions
No, I Will Not Fix..
| reply to dda
Re: sccrmhc12.comcast.net being blacklisted by Spa
It was confirmed to me today that Comcast is aware of this issue and is addressing it. Just one of the six outgoing mail servers is blacklisted, and there is no estimated time for resolution.
--
"A lot of good arguments are spoiled by some fool who knows what he is talking about." - Anonymous |
|
JTRockville
Data Ho
Premium,MVM
join:2002-01-28
Rockville, MD
clubs: | Just one? As of this morning, three of the six were listed. |
|
