I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages


Messages Mail rejection reason
172 Rejected RCPT: relay not permitted
41 Connection refused: too many connections
10 Rejected RCPT: Sender verify failed
9 Dropped: too many unrecognized commands
2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at sbl-xbl.spamhaus.org
2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at sbl-xbl.spamhaus.org
1 Dropped: too many syntax or protocol errors
1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at sbl-xbl.spamhaus.org


Very good work Spamhaus!

--
Member - Liberal International This is [email protected] Ici [email protected]
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b Phonies choke the life out of life itself. -unknown Beware https://mindspring.com

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Tue, 28 Mar 2023 14:54:53 -0000 (UTC), The Doctor wrote:

I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages

Messages Mail rejection reason
172 Rejected RCPT: relay not permitted
41 Connection refused: too many connections
10 Rejected RCPT: Sender verify failed
9 Dropped: too many unrecognized commands
2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at sbl-xbl.spamhaus.org
2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at sbl-xbl.spamhaus.org
1 Dropped: too many syntax or protocol errors
1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at sbl-xbl.spamhaus.org

Very good work Spamhaus!

Amazing they dare. It's Google!

Also: What took them so long then?
--
Andreas

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 28/03/2023 15:54, The Doctor wrote:

I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages

Very good work Spamhaus!

I'M VERY DISAPPOINTED. MY 1 MILLION ADS THAT WERE SUPPOSED TO GO OUT
EARLIER TODAY HAVE BEEN BLOCKED. HOW AM I GOING TO MAKE A LIVING WITHOUT SENDING OUT EMAILS ON BEHALF OF MY CLIENTS? DON'T THEY HAVE COMMON SENSE
TO THINK ABOUT PEOPLE'S LIVELIHOOD?

WE HAVE FAMILIES TO FEED AND SO WE SEND OUT ABOUT 1 MILLION EMAILS A DAY
USING GOOGLE, AMAZON, OUTLOOK, AOL, ZOHO, AND YAHOO. I WAS USING MAILCHIMP/MANDRILL BUT THEIR PRICES HAVE SKY ROCKETED AND MY BUSINESS
MODEL CAN'T MANAGE IT. AMAZON/AWS IS THE CHEAPEST BECAUSE IT COSTS ME
ONLY $10 PER 100,000 EMAILS BUT IT IS VERY FAST SO WORTH IT.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday, 28 March 2023 14:54 -0000,
in article <tvuv3t$1veo$[email protected]>,
Dave "The Doctor" Yadallee <[email protected]> wrote:

I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages

Messages Mail rejection reason
172 Rejected RCPT: relay not permitted
41 Connection refused: too many connections
10 Rejected RCPT: Sender verify failed
9 Dropped: too many unrecognized commands
2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at sbl-xbl.spamhaus.org
2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at sbl-xbl.spamhaus.org
1 Dropped: too many syntax or protocol errors
1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at sbl-xbl.spamhaus.org

Very good work Spamhaus!

So, Dave, how are you checking these IP addresses against the Spamhaus
DNSbls? I ask, as none of your examples appear in DNS responses to
queries of the Spamhaus SBL, XBL or PBL zones, individually or in
combination, as the Spamhaus ZEN zone.

$ host 209.85.214.177
177.214.85.209.in-addr.arpa domain name pointer mail-pl1-f177.google.com.
$ host 177.214.85.209.zen.spamhaus.org
Host 177.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.216.50
50.216.85.209.in-addr.arpa domain name pointer mail-pj1-f50.google.com.
$ host 209.85.216.50.zen.spamhaus.org
Host 209.85.216.50.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.210.180
180.210.85.209.in-addr.arpa domain name pointer mail-pf1-f180.google.com.
$ host 180.210.85.209.zen.spamhaus.org
Host 180.210.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.214.169
169.214.85.209.in-addr.arpa domain name pointer mail-pl1-f169.google.com.
$ host 169.214.85.209.zen.spamhaus.org
Host 169.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.214.170
170.214.85.209.in-addr.arpa domain name pointer mail-pl1-f170.google.com.
$ host 170.214.85.209.zen.spamhaus.org
Host 170.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.214.171
171.214.85.209.in-addr.arpa domain name pointer mail-pl1-f171.google.com.
$ host 209.85.214.171.zen.spamhaus.org
209.85.214.171.zen.spamhaus.org has address 127.0.0.11

$ host 209.85.214.179
179.214.85.209.in-addr.arpa domain name pointer mail-pl1-f179.google.com.
$ host 179.214.85.209.zen.spamhaus.org
Host 179.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.215.180
180.215.85.209.in-addr.arpa domain name pointer mail-pg1-f180.google.com.
$ host 180.215.85.209.zen.spamhaus.org
Host 180.215.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.216.42
42.216.85.209.in-addr.arpa domain name pointer mail-pj1-f42.google.com.
$ host 42.216.85.209.zen.spamhaus.org
Host 42.216.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.216.43
43.216.85.209.in-addr.arpa domain name pointer mail-pj1-f43.google.com.
$ host 43.216.85.209.zen.spamhaus.org
Host 43.216.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

$ host 209.85.216.44
44.216.85.209.in-addr.arpa domain name pointer mail-pj1-f44.google.com.
$ host 44.216.85.209.zen.spamhaus.org
Host 44.216.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

You are welcome to continue discarding what may or may not be
legitimate email, as is your wont, but you should not try to place the
blame for your own incompetence on what may be a misuse of Spamhaus
resources. Please check your configuration.

https://www.spamhaus.org/organization/dnsblusage/

- --
David Ritz <[email protected]>
"I can stand brute force, but brute reason is quite unbearable.
There is something unfair about its use. It is hitting below the
intellect." - Oscar Wilde (1854-1900)

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQSc0FU3XAVGYDjSGUhSvCmZGhLe6wUCZCO1GAAKCRBSvCmZGhLe 6zBsAJ9/jXmHHW9XuC4LQkvJBoIpeUNmtACdEPMLefVAIs6AettJ1XYG1y67TWs=
=KijJ
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In article <[email protected]>,
Andreas Kohlbach <[email protected]> wrote:

On Tue, 28 Mar 2023 14:54:53 -0000 (UTC), The Doctor wrote:

I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages


Messages Mail rejection reason
172 Rejected RCPT: relay not permitted
41 Connection refused: too many connections
10 Rejected RCPT: Sender verify failed
9 Dropped: too many unrecognized commands
2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at >sbl-xbl.spamhaus.org
2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at >sbl-xbl.spamhaus.org
1 Dropped: too many syntax or protocol errors
1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at >sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at >sbl-xbl.spamhaus.org


Very good work Spamhaus!

Amazing they dare. It's Google!

Also: What took them so long then?
--
Andreas

I noticed a second batch today.
--
Member - Liberal International This is [email protected] Ici [email protected]
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b Share, or all will be taken. -unknown Beware https://mindspring.com

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

David Ritz <[email protected]> writes:

So, Dave, how are you checking these IP addresses against the Spamhaus DNSbls? I ask, as none of your examples appear in DNS responses to
queries of the Spamhaus SBL, XBL or PBL zones, individually or in combination, as the Spamhaus ZEN zone.

$ host 209.85.214.177
177.214.85.209.in-addr.arpa domain name pointer mail-pl1-f177.google.com.
$ host 177.214.85.209.zen.spamhaus.org
Host 177.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

Listed, but "informational ONLY" "an alert to the owner of the network"

https://check.spamhaus.org/listed/?searchterm=209.85.214.177

! 209.85.214.177 has 1 listing

! This IP address has been observed to be involved in at least one of the
! following activities; sending spam, snowshoe spamming,hijacked IP space,
! or associated with bulletproof hosting.

! As a result, this IP address is listed in the Spamhaus Blocklist (SBL)

! 209.85.214.177 appears in the following listings:

! https://www.spamhaus.org/sbl/query/SBL611813

! https://www.spamhaus.org/sbl/query/SBL604995

and for both those links:

! 209.85.214.176/31 is listed on the Spamhaus Block List - SBL
! This SBL record is informational ONLY. The listing is not active, and
! will not result in any email being blocked. We are publishing this as an
! alert to the owner of the network.

Google has its own page.

https://www.spamhaus.org/sbl/listings/google.com

! Found 1367 SBL listings for IPs under the responsibility of google.com

--
Alan J. Wylie https://www.wylie.me.uk/

Dance like no-one's watching. / Encrypt like everyone is.
Security is inversely proportional to convenience

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

And for today's update

Source

https://ns2.nk.ca/eximstats-2023-03-28.html#Mail%20rejection%20reason%20count

2 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.172 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.174 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.176 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.182 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.173 is in a black list at sbl-xbl.spamhaus.org
--
Member - Liberal International This is [email protected] Ici [email protected]
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b Share, or all will be taken. -unknown Beware https://mindspring.com

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday, 29 March 2023 09:24 +0100,
in article <[email protected]>,
Alan J. Wylie <[email protected]> wrote:

David Ritz <[email protected]> writes:

So, Dave, how are you checking these IP addresses against the
Spamhaus DNSbls? I ask, as none of your examples appear in DNS
responses to queries of the Spamhaus SBL, XBL or PBL zones,
individually or in combination, as the Spamhaus ZEN zone.

$ host 209.85.214.177
177.214.85.209.in-addr.arpa domain name pointer mail-pl1-f177.google.com. >> $ host 177.214.85.209.zen.spamhaus.org
Host 177.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

Listed, but "informational ONLY" "an alert to the owner of the network"

https://check.spamhaus.org/listed/?searchterm=209.85.214.177

Yes, of course it is. However, 209.85.214.177 is not included in the
Spamhaus subscription data feed, nor in their mirrored DNS database.
As this is an informational listing, Spamhaus believes that the record
is not suitable for the purpose of blocking email; ie. blocking the
Google outbound servers is a fool's errand. While it may catch the
occassional UBE, it will also block many times more ham.

! 209.85.214.177 has 1 listing

! This IP address has been observed to be involved in at least one of the
! following activities; sending spam, snowshoe spamming,hijacked IP space,
! or associated with bulletproof hosting.

! As a result, this IP address is listed in the Spamhaus Blocklist (SBL)

! 209.85.214.177 appears in the following listings:

! https://www.spamhaus.org/sbl/query/SBL611813

! https://www.spamhaus.org/sbl/query/SBL604995

and for both those links:

! 209.85.214.176/31 is listed on the Spamhaus Block List - SBL
! This SBL record is informational ONLY. The listing is not active, and
! will not result in any email being blocked. We are publishing this as an
! alert to the owner of the network.

However, it appears that mail is being blocked at NetKnow/Netline2000,
against the stated Spamhaus policy. It is this off-policy usage,
which I am attempting to understand and address.

Google has its own page.

https://www.spamhaus.org/sbl/listings/google.com

https://www.spamhaus.org/statistics/networks/ https://www.spamhaus.org/sbl/listings/wylie.me.uk

! Found 1367 SBL listings for IPs under the responsibility of google.com

As already noted, the listings for the Gmail outbound servers are
advisory. The bulk of these SBL records pertain to activity on their
cloud hosting ranges, ie. SBL618075 34.29.141.218/32.

$ host 34.29.141.218
218.141.29.34.in-addr.arpa domain name pointer 218.141.29.34.bc.googleusercontent.com.

$ host -t TXT 218.141.29.34.zen.spamhaus.org
218.141.29.34.zen.spamhaus.org descriptive text "https://www.spamhaus.org/query/ip/34.29.141.218"
218.141.29.34.zen.spamhaus.org descriptive text "https://www.spamhaus.org/sbl/query/SBL618075

Please note, I am not in any way defending Google; Google blows
chunks. I am only stating that blocking mail from the outbound Gmail
servers, based on advisory information, is an error which is bound to
produce false positives.

I am asking the source of the lookups, whether they are from queries
made directly to the Spamhaus DNSbl mirrors, which they appear not to
be, or from some third party source.

Again, if Dave wants to deny all email originating from Google
net-space, he is more than welcome to do so. The question remains, as
to the source of informational listings which appear in Dave's Exim
logs.

- --
David Ritz <[email protected]>
"We have met the enemy and he is us."
-- Walt Kelly (1913-1973), in the voice of Pogo

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQSc0FU3XAVGYDjSGUhSvCmZGhLe6wUCZCTiFAAKCRBSvCmZGhLe 6zdXAJ9sS7lxUxaZ+Vyn/WJdgGVVNZyIOACfaMiQA0KpmbXM4B9E6+BXxMmFEAs=
=F4D5
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday, 29 March 2023 15:15 -0000,
in article <u01kn4$8bk$[email protected]>,
The Doctor <[email protected]> wrote:

And for today's update

Source

https://ns2.nk.ca/eximstats-2023-03-28.html#Mail%20rejection%20reason%20count

Yes, Dave, we know what you are copying and pasting comes from the
logs of the Exim instance running on your server. The question is,
from were is Exim getting the data, upon which you are basing your
rejections? I must ask, as the Google IP addresses you list are not
to be blocked, based on Spamhaus policy.

2 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.172 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.174 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.176 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.182 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.173 is in a black list at sbl-xbl.spamhaus.org

Dave, what is the source of the Spamhaus data, which Exim is using,
as it appears to be erroneous?

- --
David Ritz <[email protected]>
"My life has been one long descent into respectability."
- Mandy Rice-Davies (1944-2014)

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQSc0FU3XAVGYDjSGUhSvCmZGhLe6wUCZCToSwAKCRBSvCmZGhLe 671+AKCCORk7i5adWvs6xHjYPBciD67PnwCglptIha6CzVjQokqxq9mZoHzkq2g=
=dUaK
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

MOre updates!

https://ns2.nk.ca/eximstats-2023-03-29.html#Mail%20rejection%20reason%20count

1 Rejected RCPT: rejected because 209.85.214.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.182 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.45 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.51 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.53 is in a black list at sbl-xbl.spamhaus.org
--
Member - Liberal International This is [email protected] Ici [email protected]
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b Share, or all will be taken. -unknown Beware https://mindspring.com

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)