Re: SORBS Blacklist

["Bruhn, Mark S." <mbruhn () INDIANA EDU>]

I wouldn't pay any blackmail money, that's for sure.

If we got blocked by such an Internet vigilante group, and someone here
complained that something they sent didn't get to someone because of it,
I would suggest that our person vehemently complain to their colleague
at the other organization for using the service at all.  Hopefully that
person passes that along there.

IMHO, there are now much better ways to deal with incoming spam, even
some more reputable/reasonable companies with blocklists.

M. 

-- 
Mark S. Bruhn, CISSP, CISM

Chief IT Security and Policy Officer
Associate Director, Center for Applied Cybersecurity Research
(http://cacr.iu.edu)

Office of the Vice President for Information Technology and CIO
Indiana University
812-855-0326

Incidents involving IU IT resources: it-incident () iu edu
Complaints/kudos about OVPIT/UITS services: itombuds () iu edu




-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Barros, Jacob
Sent: Monday, February 23, 2004 11:18 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SORBS Blacklist


Recently we were compromised and our mail server was used to relay SPAM
by an authenticated user (and haven't found the culprit yet). As a
result, we've been blacklisted by a few places.  
One of which is SORBS.. https://www.dnsbl.au.sorbs.net/cgi-bin/lookup.

To get off their list you have to pay $50 to a charity they specify, one
of which seems bogus from the research we've done.  Does anyone know
anything about or trust this SORBS organization?  Who is looking at
SORBS for their SPAM info and if we don't get off their blacklist how
will that effect us?

We want to get this cleaned up but SORBS gives me a bad feel.  Any
comments or impressions? 



Jake Barros
Network Security Administrator
Grace College
574-372-5100

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.