[RFCI-Discuss] Rejected listing for gruver.net (was RFCI-Discuss
Digest, Vol 40, Issue 4)
Administrative Account
hostmaster at Plectere.com
Fri May 12 20:11:46 EDT 2006
Jamie L. Penman-Smithson probably wrote:
>
>The MX for GRUVER.NET is a tarpitting SMTP server that will never
>deliver anything. Despite this, my requests for it to be listed have
>been rejected.
>
>;; QUESTION SECTION:
>;gruver.net. IN MX
>
>;; ANSWER SECTION:
>gruver.net. 3600 IN MX 10 mailboxen.gruver.net.
>
>Meet mailboxen.gruver.net the spamd IP-based SPAM(tm) blocker:
>
>Trying 65.68.190.231...
>Connected to mailboxen.gruver.net.
>Escape character is '^]'.
>220 mailboxen.gruver.net ESMTP spamd IP-based SPAM blocker; Thu May
>11 18:14:24 2006
>HELO sdf.lonestar.org
>250 Hello, spam sender. Pleased to be wasting your time.
>MAIL FROM:<>
>250 You are about to try to deliver spam. Your time will be spent,
>for nothing.
There are a large number of these operated by the same outfit.
Until about three weeks ago they were using an MX of 127.0.0.1, but after
many bogusMX listings, all the domains were changed to point to this
"tarpit" fake SMTP server.
All you can really do is send (and queue) email to postmaster,
abuse and from the DSN, then after 5 days in the queue, the domain will
meet the criteria for listing in all three lists. When I first noticed
them, I didn't take advantage of the "free" listing in the mail oriented
lists, and noticed when rechecking one that it got auto-removed - then
I saw the taunting "spam" SMTP server:(
BTW. Everything in the netblock NET-65-68-190-0-1, 65.68.190.0/24, is
painted with the same brush. The private P.O. Box in Plano TX is very
similar to a large number previous spam registrations.
Paul Shupak
hostmaster at plectere.com
More information about the RFCI-Discuss
mailing list