Re: Website link for 80.122.56.18

Bert Driehuis <[email protected]> Mon, 12 Jun 2006 14:17:10 +0200 (CEST)
Newsgroups gmane.mail.spam.dsbl.admin
Message-ID <[email protected]>
[ Note: I do not represent DSBL. I just track [email protected] to keep abreast
of possible issues that might affect my use of DSBL, and occasionally I help
out with questions. You may get responses from other subscribers to
[email protected], possibly even with dissenting opinions. ]

On Mon, 12 Jun 2006, Andreas Böhler wrote:

> My Server's IP got listed, but I have the following problem
> removing it (yes, I DID READ THE FAQ, but it's slightly
> more difficult): The Server is behind a Firewall that blocks
> everything except SSH, FTP and HTTP, so this Server won't
> relay ever (and hasn't, because the Firewall was there
> before the Server came).

I think you are not aware that the vulnerability was an HTTP 
vulnerability that allowed spam to be sent from your IP address. Your 
firewall would not stop such attacks.

> But because of this, the
> confirmation mail can't be sent, as it's firewalled. All
> this wouldn't be a problem, if there wasn't a Forum
> running, that sends out confirmation E-Mails by the local
> Mailserver.
>
> The big problem is: I can't shutdown or reconfigure the
> Firewall as I don't have access rights on it!
>
> Furthermore, my Provider didn't assign a DNS record to
> 80.122.56.18 and I don't own one.
>
> What should I do?

You should get your ISP to assign reverse DNS to it. The DSBL robot will 
look up the MX from the reverse DNS.

Hope this helps!