Re: SORBS Blacklist

["King, Dennis C." <dck22 () ALFRED EDU>]

We were on the SORBS list for over a month and had great difficulty getting
off.  The list is run out of Australia and there is only one person that
handles the section that wants the $50.  While we were on list and sending
email asking about the "fine" we received no response.  I tried their fax
number.  It was not working.  I finally called the guy in Australia and
found out that he had a broken leg and had been in the hospital.  He gave me
the URL to see his x-rays.  After listening to him talk for 15 minutes, he
let us out without the $50 because of our inconvenience.  You may try
contacting him directly.  The person is Mathew Sullivan.  He emailed me from
payments () sorbs net.  If you have an incident number include it.  If you get
real desperate, like we were, his telephone number in Australia is
061 38788282.  The phone bill was offset by the "fine" we didn't pay.

We only had a couple of complaints from faculty about mail bouncing because
of this list, but faculty being faculty we had to get off.


Good luck!

Dennis C King
Information Security Officer
IT Project Manager
Alfred University
McMahon 247 , Alfred, NY 14802
email: dck22 () alfred edu - phone: 607.871.2379


-----Original Message-----
From: Barros, Jacob [mailto:jkbarros () GRACE EDU]
Sent: Monday, February 23, 2004 11:18 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SORBS Blacklist

Recently we were compromised and our mail server was used to relay SPAM
by an authenticated user (and haven't found the culprit yet). As a
result, we've been blacklisted by a few places.
One of which is SORBS.. https://www.dnsbl.au.sorbs.net/cgi-bin/lookup.

To get off their list you have to pay $50 to a charity they specify, one
of which seems bogus from the research we've done.  Does anyone know
anything about or trust this SORBS organization?  Who is looking at
SORBS for their SPAM info and if we don't get off their blacklist how
will that effect us?

We want to get this cleaned up but SORBS gives me a bad feel.  Any
comments or impressions?



Jake Barros
Network Security Administrator
Grace College
574-372-5100

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Attachment: smime.p7s
Description: