Re: [exim] Report of new spam technique

Top Page
Delete this message
Reply to this message
Author: Stephanie
Date:  
To: Exim users list
Subject: Re: [exim] Report of new spam technique
On Sat, 05 Feb 2005 19:22:47 -0600, Edgar Lovecraft <exim-list@???> wrote:
> Alan J. Flavell wrote:
> >
> > On Sat, 5 Feb 2005, David Daniels wrote:
> >
> > > Recently SWBELL has begun to block port 25 outbound from their
> > > networks. I have no idea if any other Bell applied the same rule.
> > > One could hope :)
> > >
> > > Cox Internet has been blocking outbound port 25 from their network >
> > for a long time.
>
> Unfortunately, I have to say that Cox does little more than give lip
> service to their own statements of blocking outbound TCP 25, I am
> a cox cable customer and I can connect just fine, always have been able
> to. I do know that Cox does block TCP 25 traffic in some locations,
> just not all as they say they do.


And ditto for SWBell, SWBell reported that port 25 is blocked for all
their customers in Houston in December but my stepdad's office network
has no problem at all connecting via port 25 to his domain host's
server (mine) to send out mail.

Plus I still see tons of SWBell zombies sending out directly thru port
25, here's a few entries from a dictionary attack earlier tonight:

2005-02-05 15:10:33 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<ommyhtvvte@???> rejected RCPT <never-existed
address>: BLOCKED at rcpt CHECK USER per exim_domainusers

2005-02-05 15:10:35 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<ommyhtvvte@???> rejected RCPT <never-existed
address>: BLOCKED at rcpt CHECK USER per exim_domainusers

2005-02-05 15:10:37 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<qcrmmubpbud@???> rejected RCPT
<never-existed address>: BLOCKED at rcpt CHECK USER per
exim_domainusers

2005-02-05 15:10:39 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<qcrmmubpbud@???> rejected RCPT
<never-existed address>: BLOCKED at rcpt CHECK USER per
exim_domainusers

2005-02-05 15:10:46 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<qcrmmubpbud@???> rejected RCPT
<never-existed address>: BLOCKED at rcpt CHECK USER per
exim_domainusers

2005-02-05 15:10:47 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<qcrmmubpbud@???> rejected RCPT
<never-existed address>: BLOCKED at rcpt CHECK USER per
exim_domainusers

2005-02-05 15:10:50 H=adsl-69-150-4-107.dsl.hstntx.swbell.net
[69.150.4.107] F=<vmseo@???> rejected RCPT <never-existed
address>: BLOCKED at rcpt CHECK USER per exim_domainusers

bah humbug on their port 25 blocking.

--
hth,
Stephanie

Links blog: http://alice.ttlg.net/links/
Glenfinnan Web Hosting: http://www.glenfinnan.net/