Re: [anti-spam-wg@localhost] I really need your help!

  • To: "Eng.Sherif A.Gurguis" <
    >
  • From: "william(at)elan.net" <
    >
  • Date: Sun, 3 Jul 2005 19:45:22 -0700 (PDT)

On Sun, 3 Jul 2005, Eng.Sherif A.Gurguis wrote:

Hello everybody
      I am from EgyNet (AS:20858), and we are assigned the following
IP blocks: 62.139.0.0/16 and 84.36.0.0/16. Recently, we have been
receiving complaints from some of our customers in the first block
that they are facing problems in sending emails as their recepients'
anti-spam systems reject emails as the source is identifed as a
spammer. I tried to lookup in the spammer databases available on the
Web, such as (http://www.rbls.org), but I could not reach any solid
point. Thus, I really need your help to discover if my 62.139.0.0/16
block is actually identified as a source of spams or not; and if yes,
how can I remove this block from the spam lists?
62.139.0.0/16 has a lot of hits (its a disaster as far as open-proxies go).
There are number of individual ip hits all over and some /24 blocks
are entered in entirely, in particular 62.139.90.0/24, see
http://www.completewhois.com/cgi-bin/rbl_lookup.cgi?query=62.139.90.1&display=webtable

Nearby blocks like 91.0/24 are also badly polluted and also end of the block, see 62.139.244.242, 62.139.252.99/24, etc. There are 320 hits
on AHBL, 400 hits on CBL, and about same number on SORBL and NJABL and
DSBL has 978 hits!!! I'll sort it and try to send it to you privately.

For those interested completewhois recently made available new
multi-rbl look query tool, see:
http://www.completewhois.com/rbl_lookup.htm
It is very fast since almost all data is locally stored and pre-sorted,
but right now its limited to individual ip and domain lookups only.

At some future time (2-3 months away), we'll be able to provide
information on ip ranges as well, especially if you're an ISP that owns the range. If you're interested, I suggest contacting me privately and I'll set you up as beta-tester once this is available, but don't expect
anything immediately, most work on it would probably be done in August. For right now I can run queries and sort the data manually, but it takes
20 minutes for blocks like this /16, so you better have some means of convincing me to do it if ask for that.

--
William Leibzon
Elan Networks
william@localhost