Email Servers On Spamcop blacklist

toytown · 17-02-2004, 01:09

Hi

Just to let you know that some (not all) of NTL's email servers are on spamcops blacklist. So a % (somebody like to hazard a guess, ive been told maybe above 50%) of your email will never be delivered to its recipent (unless there on the NTL network) are ntl going to get this sorted.

Toytown

Charlie_Bubble · 17-02-2004, 01:24

Doesn't surprise me. Spam seems to be a long way down NTL's 'things to be the least bit bothered about' list. The amount of spam I get is ridiculous and it's not just directed at me. I see dozens of other ntlworld.com email addresses in the 'to' box. A lot of these spam emails are faked to look like they come from NTL emails so it's not surprising that the servers are going to start showing up on anti-spam listings.

shin0r · 17-02-2004, 11:22

It's hardly surprising - ntl's mail servers are some of the busiest in the UK.

However, they don't accept smtp connections from IP ranges *outside* their own network blocks, (i.e aren't open relays), and employ a spam harvesting algorithm to stop customers using dictionary attacks.

quoting from the Spamcop website: "This blocking list is somewhat experimental. This system and most other spam-filtering systems should not be used in a production environment where legitimate email must be delivered."

"The description of the algorithm used for deciding whether to block a host may be out of date, and is subject to change without notice.There is no warranty associated with using this system. It is provided as is."

It appears that mta08-svc.ntlworld.com has been placed on the blacklist due to the amount of email it sends. It's a mail server for one of the UK's largest ISPs, it always sends a huge volume of emails a day.

If you find your emails being bounced/blocked I'd recommend talking with the admins of the receiving ISP.

altis · 29-11-2004, 22:22

Who's been a naughty boy then?

Quote:

Originally Posted by spamcop

Reason: 212.250.162.8 listed at bl.spamcop.net

Quote:

Originally Posted by whois

212.250.162.8 PTR record: mailhost.ntl.com. [TTL 86400s] [A=212.250.162.8, 212.250.162.6]

This is a might inconvenient - will have to resort to old dog-and-bone now!

01-12-2004, 09:30

I've also had legitimate mails blocked because of Spamcop blacklisting though interestingly one address is mainly accepted, sometimes rejected. How does that work then?!

Chris W · 01-12-2004, 13:46

Quote:

212.250.162.8 not listed in bl.spamcop.net

not any more

Matth · 01-12-2004, 20:41

Many automated lists expire blocks after some time, it saves having to administer removals.

Some do only clear it on request, and some (personal, not recommended for production use) make highly opinionate judgements on large address blocks and whole ISP's (actually, for personal use, blocking the entire APNIC administered address range and the entire 24.x.x.x US cable ISP range would nuke 99% of spam, though possibly some wanted stuff too).

Mike Harrison · 17-01-2005, 13:43

I've had a few messages from ntl users today that Mailwasher shows as blacklisted by spamcop.

Chris W · 17-01-2005, 13:57

yup the mail servers have been blacklisted by spamcop again

altis · 20-01-2005, 11:44

Quote:

Originally Posted by spamcop

212.250.162.8 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 22 hours.

Causes of listing

* System has sent mail to SpamCop spam traps in the past week (spam traps are secret, no reports or evidence are provided by SpamCop)

Additional potential problems
(these factors do not directly result in spamcop listing)

* System administrator has already delisted this system once

Because of the above problems, express-delisting is not available

Listing History
In the past 72.1 days, it has been listed 18 times for a total of 4.0 days

Other hosts in this "neighborhood" with spam reports
212.250.162.16

Dispute Listing
If you are the administrator of this system and you are sure this listing is erroneous, you may request that we review the listing. Because everyone wants to dispute their listing, regardless of merit, we reserve the right to ignore meritless disputes.
Dispute listing of 212.250.162.8

taken from: http://www.spamcop.net/w3m?action=ch...=212.250.162.8

This is having a serious effect on my emails. Is there no one able to sort this out?

Toto · 20-01-2005, 12:30

Oh hell, here we go, better get the dust off Bertie the carrier pidgeon.

altis · 20-01-2005, 13:10

Quote:

Originally Posted by spamcop

212.250.162.8 not listed in bl.spamcop.net

Well done someone!

Now can we shoot the customer who's causing all this grief?

Matth · 20-01-2005, 16:02

If there are any spamtraps (or do they mean user reports) on the NTL network, it seems that an innocent "intermediate" mailhost is being tagged...

Quote:

Return-Path: <dykhu@lostcitadel.>
Received: from aamta02-winn.mailhost.ntl.com ([212.250.162.8])
by mta10-winn.mailhost.ntl.com with ESMTP
id <20050116194927.KZHQ15581.mta10-winn.mailhost.ntl.com@aamta02-winn.mailhost.ntl.>
for <*****@ntlworld.>; Sun, 16 Jan 2005 19:49:27 +0000
Received: from lostcitadel.com ([69.40.140.63])
by aamta02-winn.mailhost.ntl.com with SMTP
id <20050116194926.QBNG3760.aamta02-winn.mailhost.ntl.com@lostcitadel.>
for <*****@ntlworld.>; Sun, 16 Jan 2005 19:49:26 +0000
Return-path: <dykhu@lostcitadel.>
From: Barbara Vieger <dykhu@lostcitadel.>
To: <*****@ntlworld.>
Subject: Barbara Samurai MNEI St0ck Info raunchy
Date: Sun, 16 Jan 2005 13:51:45 -0600
Reply-To: <dykhu@lostcitadel.>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: plain
Message-Id: <20050116194926.QBNG3760.aamta02-winn.mailhost.ntl.com@lostcitadel.>
X-Antivirus: AVG for E-mail 7.0.300 [265.6.13]

The source IP does not tally:
69.40.140.63 = h63.140.40.69.ip.alltel.net (Proxy/Trojan according to CBL - abuseat.org )

Munged my email, and every ".com", to avoid giving spam harvesters targets that are reachable, if not valid

21-01-2005, 10:43

As anyone who has read any of my other posts regarding anything vaguely technical will know, I'm a bit thick in this area. So can anyone explain the mail failure message from the NTL postmaster below, preferably in words of on syllable! Does Spamcop have a problem with NTL or the recipent, telegraph.co.uk?!

Cheers,

Andy

Reporting-MTA: dns; mta10-winn.maildmz.private.ntl.com
Arrival-Date: Fri, 21 Jan 2005 10:33:42 +0000
Received-From-MTA: dns; aamta04-winn.mailhost.ntl.com (212.250.162.8)

Final-Recipient: RFC822; <robert.peston@telegraph.co.uk>
Action: failed
Status: 5.1.3
Remote-MTA: dns; relay2.telegraph.co.uk (193.115.165.42)
Diagnostic-Code: smtp; 553 5.3.0 Spam blocked, see: http://spamcop.net/bl.shtml?212.250.162.18

Chris W · 21-01-2005, 11:04

Quote:

Originally Posted by andyl

As anyone who has read any of my other posts regarding anything vaguely technical will know, I'm a bit thick in this area. So can anyone explain the mail failure message from the NTL postmaster below, preferably in words of on syllable! Does Spamcop have a problem with NTL or the recipent, telegraph.co.uk?!

Cheers,

Andy

Reporting-MTA: dns; mta10-winn.maildmz.private.ntl.com
Arrival-Date: Fri, 21 Jan 2005 10:33:42 +0000
Received-From-MTA: dns; aamta04-winn.mailhost.ntl.com (212.250.162.8)

Final-Recipient: RFC822; <robert.peston@telegraph.co.uk>
Action: failed
Status: 5.1.3
Remote-MTA: dns; relay2.telegraph.co.uk (193.115.165.42)
Diagnostic-Code: smtp; 553 5.3.0 Spam blocked, see: http://spamcop.net/bl.shtml?212.250.162.18

Spamcop has the problem with ntl-> details from spamcops site:

Quote:

212.250.162.18 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 20 hours.
Causes of listing

* System has sent mail to SpamCop spam traps in the past week (spam traps are secret, no reports or evidence are provided by SpamCop)
* SpamCop users have reported system as a source of spam about 30 times in the past week