From s.osali at mobinnet.net Mon Apr 4 15:54:34 2016 From: s.osali at mobinnet.net (Saeed Osali) Date: Mon, 4 Apr 2016 13:54:34 +0000 Subject: [members-discuss] listed in UCEProtect level 3 blacklist Message-ID: Dear All friends, We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? Any help in this regard is appreciated. BR, From tim at treestle.com Mon Apr 4 16:12:36 2016 From: tim at treestle.com (Tim Armstrong) Date: Mon, 4 Apr 2016 16:12:36 +0200 Subject: [members-discuss] listed in UCEProtect level 3 blacklist In-Reply-To: References: Message-ID: <57027654.4000801@treestle.com> Personally, I'd just recommend you pay. To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough. Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this. Regards, Tim. On 04/04/16 15:54, Saeed Osali wrote: > Dear All friends, > > We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. > > What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? > > Any help in this regard is appreciated. > > BR, > > ---- > If you don't want to receive emails from the RIPE NCC members-discuss > mailing list, please log in to your LIR Portal account and go to the general page: > https://lirportal.ripe.net/general/ > > Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. -- Tim Armstrong Technical Director Treestle B.V. Goudsesingel 78, 3011 KD, Rotterdam, The Netherlands Chamber of Commerce: 59116803 Office: +31 (0) 10 3400 720 Mobile: +31 (0) 61 7544 472 Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com and offers LiquiD AutoScaler, a website-user centric autoscaling solution at www.liquidautoscaler.com . Independent software vendor for: Member of: -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: gafaiehf.png Type: image/png Size: 9152 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: hefahjag.png Type: image/png Size: 124 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: jhacihej.png Type: image/png Size: 3713 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: fgiebaja.png Type: image/png Size: 2584 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: jdghjcia.png Type: image/png Size: 3491 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: fbcfhjej.png Type: image/png Size: 2051 bytes Desc: not available URL: From marc.schuler at internet-group.net Mon Apr 4 16:21:22 2016 From: marc.schuler at internet-group.net (INTERNET GROUP | Marc Schuler) Date: Mon, 04 Apr 2016 16:21:22 +0200 Subject: [members-discuss] listed in UCEProtect level 3 blacklist In-Reply-To: <57027654.4000801@treestle.com> References: <57027654.4000801@treestle.com> Message-ID: <0bf7aa1d85ccb202ec02975bf6334cd5@internet-group.net> Hello, Please _NEVER_ pay to Dirk Lautenschlagger (lives in Erlen, Switzerland), the Scamer behind UCEPROTECT. Go to the police, extortion is a crime. A picture of the scamer: http://www.20min.ch/schweiz/ostschweiz/story/Villenstreit-geht-per-YouTube-in-naechste-Runde-29470029 Regards, Marc Am 2016-04-04 16:12, schrieb Tim Armstrong: > Personally, I'd just recommend you pay. > > To get listed at the AS level means you're doing something wrong, > either you've got bad clients or you're just not helping your clients > with their security enough. > > Take it as a lesson, it's not like you can't have seen it coming you > must have been receiving a tonne of mail at your abuse contact before > this. > > Regards, > Tim. > > On 04/04/16 15:54, Saeed Osali wrote: > >> Dear All friends, >> >> We've faced a problem recently regarding getting listed our ASN in >> UCEProtect Level-3 which means that about 0.2% of our IP Addresses >> are listed in UCEprotect-L1 level and are recognized as abusive >> spammers. As I checked delisting solution on the UCEProtect website, >> we have to pay 500 Euros roughly to get rid of this problem or wait >> for a week provided that none of our IPs get connected to their >> spam-trappers during this week. To make matters worse, yahoo, AOL, >> and Microsoft are using this blacklist service on their mail >> servers. >> >> What is your other solution for preventing IP black listing? Have >> you ever faced to the same problem with this company? Pay or not? >> >> Any help in this regard is appreciated. >> >> BR, >> >> ---- >> If you don't want to receive emails from the RIPE NCC >> members-discuss >> mailing list, please log in to your LIR Portal account and go to the >> general page: >> https://lirportal.ripe.net/general/ [1] >> >> Click on "Edit my LIR details", under "Subscribed Mailing Lists". >> From here, you can add or remove addresses. > > -- > > [2] > > TIM ARMSTRONG > > Technical Director > Treestle B.V. > Goudsesingel 78, 3011 KD, > Rotterdam, The Netherlands > Chamber of Commerce: 59116803 > Office: +31 (0) 10 3400 720 > Mobile: +31 (0) 61 7544 472 > > Treestle runs one of the world's fastest global managed DNS platforms > at www.liquidns.com [3] and > offers LiquiD AutoScaler, a website-user centric autoscaling solution > at www.liquidautoscaler.com [4]. > > INDEPENDENT SOFTWARE VENDOR FOR: > > [5] > Member of: > > [5] > > [6] [7] [8] > > > > Links: > ------ > [1] https://lirportal.ripe.net/general/ > [2] http://liquidns.com > [3] http://www.liquidns.com/ > [4] http://www.liquidautoscaler.com/ > [5] > https://apps.db.ripe.net/search/lookup.html?source=ripe&key=ORG-TB77-RIPE&type=organisation > [6] https://aws.amazon.com/marketplace/pp/B013UXHSOO/?ref=_ptnr_pe_ > [7] https://cloudstore.interoute.com/LiquiDAutoScalerBasic > [8] https://liquidautoscaler.com/documentation/other/quickstart > > ---- > If you don't want to receive emails from the RIPE NCC members-discuss > mailing list, please log in to your LIR Portal account and go to the > general page: > https://lirportal.ripe.net/general/ > > Click on "Edit my LIR details", under "Subscribed Mailing Lists". From > here, you can add or remove addresses. From mm at 1h.com Mon Apr 4 16:21:22 2016 From: mm at 1h.com (Marian Marinov) Date: Mon, 4 Apr 2016 17:21:22 +0300 Subject: [members-discuss] listed in UCEProtect level 3 blacklist In-Reply-To: <57027654.4000801@treestle.com> References: <57027654.4000801@treestle.com> Message-ID: <57027862.3020105@1h.com> We try to be proactive in spam detection and all e-mail is checked for spam on outgoing. We have written tools to automatically disable outgoing mail to our clients, that do try to send spam. SMTP other then our own SMTP cluster is not allowed in our ranges. Other then that, we regularly query different spam lists to check if any single IP is listed as a spammer. It is possible to send spam via other ports :) Clients that get hacked a lot or are simply spammers get permanent block on outgoing smtp connections. Marian On 04/04/2016 05:12 PM, Tim Armstrong wrote: > Personally, I'd just recommend you pay. > > To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough. > > Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this. > > Regards, > Tim. > > On 04/04/16 15:54, Saeed Osali wrote: >> Dear All friends, >> >> We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. >> >> What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? >> >> Any help in this regard is appreciated. >> >> BR, >> >> ---- >> If you don't want to receive emails from the RIPE NCC members-discuss >> mailing list, please log in to your LIR Portal account and go to the general page: >> https://lirportal.ripe.net/general/ >> >> Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. > > -- > > > > > Tim Armstrong > > > Technical Director > Treestle B.V. > Goudsesingel 78, 3011 KD, > Rotterdam, The Netherlands > Chamber of Commerce: 59116803 > Office: +31 (0) 10 3400 720 > Mobile: +31 (0) 61 7544 472 > > > > > Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com and > offers LiquiD AutoScaler, a website-user centric autoscaling solution at www.liquidautoscaler.com. > > > Independent software vendor for: > > > > > Member of: > > > > > > > > ---- > If you don't want to receive emails from the RIPE NCC members-discuss > mailing list, please log in to your LIR Portal account and go to the general page: > https://lirportal.ripe.net/general/ > > Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. > -- Marian Marinov Founder & CEO of 1H Ltd. Jabber/GTalk: hackman at jabber.org ICQ: 7556201 Mobile: +359 886 660 270 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 181 bytes Desc: OpenPGP digital signature URL: From matthias.subik at ucnd.at Mon Apr 4 16:26:24 2016 From: matthias.subik at ucnd.at (=?utf-8?Q?Matthias_=C5=A0ubik?=) Date: Mon, 4 Apr 2016 16:26:24 +0200 Subject: [members-discuss] listed in UCEProtect level 3 blacklist In-Reply-To: <57027654.4000801@treestle.com> References: <57027654.4000801@treestle.com> Message-ID: <455EF1CF-DD1C-4DD9-9B74-D5A672780E2C@ucnd.at> > On 04.04.2016, at 16:12, Tim Armstrong wrote: > > Personally, I'd just recommend you pay. > > To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough. > > Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this. > > Regards, > Tim. get external help if possible. I?m fighting SPAM/UCE in our AS for the last ten years, and blacklisting is on a low in recent days. Most automated blacklisting services push notifications to your irt-abuse-contact, or your abuse or e-mail address, if there isn?t anything better in RIPE-DB. Clear RIPE-DB entries help, especially if you have an tor-exit-node in your network. Matthias > > On 04/04/16 15:54, Saeed Osali wrote: >> Dear All friends, >> >> We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. >> >> What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? >> >> Any help in this regard is appreciated. >> >> BR, >> >> ---- >> If you don't want to receive emails from the RIPE NCC members-discuss >> mailing list, please log in to your LIR Portal account and go to the general page: >> >> https://lirportal.ripe.net/general/ >> >> >> Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. >> > > -- > > Tim Armstrong > > Technical Director > Treestle B.V. > Goudsesingel 78, 3011 KD, > Rotterdam, The Netherlands > Chamber of Commerce: 59116803 > Office: +31 (0) 10 3400 720 > Mobile: +31 (0) 61 7544 472 > > > > Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com and > offers LiquiD AutoScaler, a website-user centric autoscaling solution at www.liquidautoscaler.com. > > > > Independent software vendor for: > > > Member of: > > > > > ---- > If you don't want to receive emails from the RIPE NCC members-discuss > mailing list, please log in to your LIR Portal account and go to the general page: > https://lirportal.ripe.net/general/ > > Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. -- UCND United City Network Development GmbH Ungargasse 58/13 1030 Wien, ?sterreich FN 188089b beim Handelsgericht Wien UID ATU 54974906 Mag. Matthias ?ubik Hotline: +43 780 363636 Mobil.: +43 676 83820-787 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3701 bytes Desc: not available URL: From Adnan.AlKhatib at bh.zain.com Mon Apr 4 16:28:18 2016 From: Adnan.AlKhatib at bh.zain.com (Adnan Al Khatib) Date: Mon, 4 Apr 2016 14:28:18 +0000 Subject: [members-discuss] listed in UCEProtect level 3 blacklist In-Reply-To: References: Message-ID: <447D275AF1DEEF4D8789CA1D5E2E7794019CAA4C89@HQ-EXMBX-01.bh.zain.com> Hello; You can pay now for quick delisting, but if the issue is not solved from its roots you will get listed again. I suggest the below solution. 1. Block port 25 for all your residential subscribers (non-corporate and non-static IP subscribers). As port 25 is the port usually used by spam malware. 2. Create an open smtp server to be used by your subscribers only instead of using their own that has Antispam software on it (sendmail). 3. Any complaining subscriber ask them to use alternative port numbers other than 25 (ex: port 587). Check the below link. https://www.verizon.com/support/residential/internet/highspeed/general+support/top+questions/questionsone/124274.htm Regards Adnan -----Original Message----- From: members-discuss [mailto:members-discuss-bounces at ripe.net] On Behalf Of Saeed Osali Sent: Monday, April 04, 2016 4:55 PM To: members-discuss-bounces at ripe.net; members-discuss at ripe.net Subject: [members-discuss] listed in UCEProtect level 3 blacklist Dear All friends, We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? Any help in this regard is appreciated. BR, ---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/ Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. ________________________________ Disclaimer This communication is intended for the above named person and is confidential and / or legally privileged. Any opinion(s) expressed in this communication are not necessarily those of Zain. If it has come to you in error you must take no action based upon it, nor must you print it, copy it, forward it, or show it to anyone. Please delete and destroy the e-mail and any attachments and inform the sender immediately. Thank you. Zain is not responsible for the political, religious, racial or partisan opinion in any correspondence conducted by its domain users. Therefore, any such opinion expressed, whether explicitly or implicitly, in any said correspondence is not to be interpreted as that of Zain. Zain may monitor all incoming and outgoing e-mails in line with Zain business practice. Although Zain has taken steps to ensure that e-mails and attachments are free from any virus, we advise that, in keeping with best business practice, the recipient must ensure they are actually virus free.