Security Basics mailing list archives

Re: Sorbs.net DNS Blacklist


From: Greg Armer <greg () propdata co za>
Date: Fri, 10 Mar 2006 07:34:20 +0200

On Thu, Mar 09, 2006 at 09:31:12AM -0600, Dan Denton wrote:
Does anyone on the list have any prior experience with the folks at
sorbs.net? For the past few weeks a customer who uses a blacklist
supplied by them has had our emails blocked. Previous to this the
company had no problem getting our emails. People at said company want
to receive our emails and are frustrated that they can't receive them
(important stuff like invoices and statements), but their IT admin says
he has no control over the list itself. 

Hi Dan,

I unfortunately dont have any experience in dealing with Sorbs, however
I dont agree with this "IT Admins" response. He is blocking your emails
on the server he is in control of, he has the ability to automatically
whitelist email from you regardless of what one of his blocking tools
says. I have had this problem in the past, and it was a 2 minute job to
add my clients domain into the auto whitelist and make the problem go
away.

Perhaps request that he does this instead.


I went to sorbs.net, checked our status using one of their utilities,
and the IP of our mail server shows up on their list. I've even sent in
a request to be removed from the list and have received a ticket number.
In their procedures for delisting, they claim that you must "donate" $50
per email they supposedly received in their spam traps, and the
donations are to be made to 2 charities of their choice. I for one think
this is extortion, regardless of whether the intention is to stop
spammers.


I agree, this does sound like extortion.

Any background or experience you can share would be appreciated. Thanks
in advance...

Dan Denton

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




kind regards,


Greg Armer

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: