listed in UCEProtect level 3 blacklist
Dear All friends, We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? Any help in this regard is appreciated. BR,
Personally, I'd just recommend you pay. To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough. Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this. Regards, Tim. On 04/04/16 15:54, Saeed Osali wrote:
Dear All friends,
We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers.
What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not?
Any help in this regard is appreciated.
BR,
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
-- <http://liquidns.com> Tim Armstrong Technical Director Treestle B.V. Goudsesingel 78, 3011 KD, Rotterdam, The Netherlands Chamber of Commerce: 59116803 Office: +31 (0) 10 3400 720 Mobile: +31 (0) 61 7544 472 Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com <http://www.liquidns.com/> and offers LiquiD AutoScaler, a website-user centric autoscaling solution at www.liquidautoscaler.com <http://www.liquidautoscaler.com/>. Independent software vendor for: <https://apps.db.ripe.net/search/lookup.html?source=ripe&key=ORG-TB77-RIPE&type=organisation> Member of: <https://apps.db.ripe.net/search/lookup.html?source=ripe&key=ORG-TB77-RIPE&type=organisation> <https://aws.amazon.com/marketplace/pp/B013UXHSOO/?ref=_ptnr_pe_> <https://cloudstore.interoute.com/LiquiDAutoScalerBasic><https://liquidautoscaler.com/documentation/other/quickstart>
Hello, Please _NEVER_ pay to Dirk Lautenschlagger (lives in Erlen, Switzerland), the Scamer behind UCEPROTECT. Go to the police, extortion is a crime. A picture of the scamer: http://www.20min.ch/schweiz/ostschweiz/story/Villenstreit-geht-per-YouTube-i... Regards, Marc Am 2016-04-04 16:12, schrieb Tim Armstrong:
Personally, I'd just recommend you pay.
To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough.
Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this.
Regards, Tim.
On 04/04/16 15:54, Saeed Osali wrote:
Dear All friends,
We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers.
What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not?
Any help in this regard is appreciated.
BR,
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/ [1]
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
--
[2]
TIM ARMSTRONG
Technical Director Treestle B.V. Goudsesingel 78, 3011 KD, Rotterdam, The Netherlands Chamber of Commerce: 59116803 Office: +31 (0) 10 3400 720 Mobile: +31 (0) 61 7544 472
Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com [3] and offers LiquiD AutoScaler, a website-user centric autoscaling solution at www.liquidautoscaler.com [4].
INDEPENDENT SOFTWARE VENDOR FOR:
[5] Member of:
[5]
[6] [7] [8]
Links: ------ [1] https://lirportal.ripe.net/general/ [2] http://liquidns.com [3] http://www.liquidns.com/ [4] http://www.liquidautoscaler.com/ [5] https://apps.db.ripe.net/search/lookup.html?source=ripe&key=ORG-TB77-RIP... [6] https://aws.amazon.com/marketplace/pp/B013UXHSOO/?ref=_ptnr_pe_ [7] https://cloudstore.interoute.com/LiquiDAutoScalerBasic [8] https://liquidautoscaler.com/documentation/other/quickstart
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
We try to be proactive in spam detection and all e-mail is checked for spam on outgoing. We have written tools to automatically disable outgoing mail to our clients, that do try to send spam. SMTP other then our own SMTP cluster is not allowed in our ranges. Other then that, we regularly query different spam lists to check if any single IP is listed as a spammer. It is possible to send spam via other ports :) Clients that get hacked a lot or are simply spammers get permanent block on outgoing smtp connections. Marian On 04/04/2016 05:12 PM, Tim Armstrong wrote:
Personally, I'd just recommend you pay.
To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough.
Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this.
Regards, Tim.
On 04/04/16 15:54, Saeed Osali wrote:
Dear All friends,
We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers.
What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not?
Any help in this regard is appreciated.
BR,
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
Tim Armstrong
Technical Director Treestle B.V. Goudsesingel 78, 3011 KD, Rotterdam, The Netherlands Chamber of Commerce: 59116803 Office: +31 (0) 10 3400 720 Mobile: +31 (0) 61 7544 472
Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com <http://www.liquidns.com/> and offers LiquiD AutoScaler, a website-user centric autoscaling solution at <http://www.liquidautoscaler.com/>www.liquidautoscaler.com.
Independent software vendor for:
<https://apps.db.ripe.net/search/lookup.html?source=ripe&key=ORG-TB77-RIPE&type=organisation>
Member of:
<https://apps.db.ripe.net/search/lookup.html?source=ripe&key=ORG-TB77-RIPE&type=organisation>
<https://aws.amazon.com/marketplace/pp/B013UXHSOO/?ref=_ptnr_pe_> <https://cloudstore.interoute.com/LiquiDAutoScalerBasic><https://liquidautoscaler.com/documentation/other/quickstart>
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
-- Marian Marinov Founder & CEO of 1H Ltd. Jabber/GTalk: hackman@jabber.org ICQ: 7556201 Mobile: +359 886 660 270
On 04.04.2016, at 16:12, Tim Armstrong <tim@treestle.com> wrote:
Personally, I'd just recommend you pay.
To get listed at the AS level means you're doing something wrong, either you've got bad clients or you're just not helping your clients with their security enough.
Take it as a lesson, it's not like you can't have seen it coming you must have been receiving a tonne of mail at your abuse contact before this.
Regards, Tim.
get external help if possible. I’m fighting SPAM/UCE in our AS for the last ten years, and blacklisting is on a low in recent days. Most automated blacklisting services push notifications to your irt-abuse-contact, or your abuse or e-mail address, if there isn’t anything better in RIPE-DB. Clear RIPE-DB entries help, especially if you have an tor-exit-node in your network. Matthias
On 04/04/16 15:54, Saeed Osali wrote:
Dear All friends,
We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers.
What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not?
Any help in this regard is appreciated.
BR,
---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page:
https://lirportal.ripe.net/general/
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
-- <gafaiehf.png> Tim Armstrong
Technical Director Treestle B.V. Goudsesingel 78, 3011 KD, Rotterdam, The Netherlands Chamber of Commerce: 59116803 Office: +31 (0) 10 3400 720 Mobile: +31 (0) 61 7544 472
<hefahjag.png>
Treestle runs one of the world's fastest global managed DNS platforms at www.liquidns.com and offers LiquiD AutoScaler, a website-user centric autoscaling solution at www.liquidautoscaler.com.
<hefahjag.png>
Independent software vendor for:
<hefahjag.png> Member of: <jhacihej.png>
<fgiebaja.png><jdghjcia.png><fbcfhjej.png> ---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/
Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses.
-- UCND United City Network Development GmbH Ungargasse 58/13 1030 Wien, Österreich FN 188089b beim Handelsgericht Wien UID ATU 54974906 Mag. Matthias Šubik Hotline: +43 780 363636 Mobil.: +43 676 83820-787
Hello; You can pay now for quick delisting, but if the issue is not solved from its roots you will get listed again. I suggest the below solution. 1. Block port 25 for all your residential subscribers (non-corporate and non-static IP subscribers). As port 25 is the port usually used by spam malware. 2. Create an open smtp server to be used by your subscribers only instead of using their own that has Antispam software on it (sendmail). 3. Any complaining subscriber ask them to use alternative port numbers other than 25 (ex: port 587). Check the below link. https://www.verizon.com/support/residential/internet/highspeed/general+suppo... Regards Adnan -----Original Message----- From: members-discuss [mailto:members-discuss-bounces@ripe.net] On Behalf Of Saeed Osali Sent: Monday, April 04, 2016 4:55 PM To: members-discuss-bounces@ripe.net; members-discuss@ripe.net Subject: [members-discuss] listed in UCEProtect level 3 blacklist Dear All friends, We've faced a problem recently regarding getting listed our ASN in UCEProtect Level-3 which means that about 0.2% of our IP Addresses are listed in UCEprotect-L1 level and are recognized as abusive spammers. As I checked delisting solution on the UCEProtect website, we have to pay 500 Euros roughly to get rid of this problem or wait for a week provided that none of our IPs get connected to their spam-trappers during this week. To make matters worse, yahoo, AOL, and Microsoft are using this blacklist service on their mail servers. What is your other solution for preventing IP black listing? Have you ever faced to the same problem with this company? Pay or not? Any help in this regard is appreciated. BR, ---- If you don't want to receive emails from the RIPE NCC members-discuss mailing list, please log in to your LIR Portal account and go to the general page: https://lirportal.ripe.net/general/ Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. ________________________________ Disclaimer This communication is intended for the above named person and is confidential and / or legally privileged. Any opinion(s) expressed in this communication are not necessarily those of Zain. If it has come to you in error you must take no action based upon it, nor must you print it, copy it, forward it, or show it to anyone. Please delete and destroy the e-mail and any attachments and inform the sender immediately. Thank you. Zain is not responsible for the political, religious, racial or partisan opinion in any correspondence conducted by its domain users. Therefore, any such opinion expressed, whether explicitly or implicitly, in any said correspondence is not to be interpreted as that of Zain. Zain may monitor all incoming and outgoing e-mails in line with Zain business practice. Although Zain has taken steps to ensure that e-mails and attachments are free from any virus, we advise that, in keeping with best business practice, the recipient must ensure they are actually virus free.
participants (6)
-
Adnan Al Khatib -
INTERNET GROUP | Marc Schuler -
Marian Marinov -
Matthias Šubik -
Saeed Osali -
Tim Armstrong