RE: Website link for 24.123.89.50

Dear RoadRunner network security team,

Please remove the dsbl listing for the address listed
"rrcs-24-123-89-5.central.biz.rr.com"

This address has been clear for over a year. See notes below regarding
messages to DSBL.

Thank you.




-----Original Message-----
From: Alexey Lobanov (dsbl) [mailto:[email protected]] 
Sent: Thursday, December 07, 2006 11:08 AM
To: Dennis Dicosola
Cc: [email protected]
Subject: Re: [DSBL-Contact] Website link for 24.123.89.50

Hi,

On 07/12/06 19:54, Dennis Dicosola wrote:

> Thank you for the reply,
> 
> Our firewall checks against dsbl lists and rejects those email before 
> the email is delivered to the mail server.
> 
> If the address is ok now why can we not have it removed?

The RoadRunner network security team can do it for you, upon your request.
DSBL policy assumes that all delistings must be done ONLY by a person
responsible for abuse/security reports related to the host in question. As
the name of the host in question is "rrcs-24-123-89-5.central.biz.rr.com",
this person is not you...

> 
> I'd rather not make an exception for that address in our firewall 
> based on the following...
> 
> If the address becomes infected in the future we may not know it has 
> been affected if we make an exception rule.

If this address will still belong to your staff member, your primary problem
will be not mail delivery glitches but the general corporate security :-(

If it won't, you should know about it and remove it from whitelist in time.

I repeat that a better option is to use SMTP AUTH to recognize your staff
members, instead of fragile "exception rules" based on external IP-addresses
being out of your control. It is possible that RR may change client address
without any warnings, and you should not depend upon it.

> 
> The data you have listed is from 2005 and it has been clear since.

So, you may ask RR security to delist it from DSBL. The contacts are in your
salesman's service contract with RR.

Alexey

> 
> Any thoughts? 
> 
> -----Original Message-----
> From: Alexey Lobanov (dsbl) [mailto:[email protected]]
> Sent: Thursday, December 07, 2006 10:48 AM
> To: Dennis Dicosola
> Cc: [email protected]
> Subject: Re: [DSBL-Contact] Website link for 24.123.89.50
> 
> Hello.
> 
> On 07/12/06 19:25, Dennis Dicosola wrote:
> 
>> To whom it may concern,
>>
>> The ip listed above was listed in your database last year based on an 
>> infection that has since been taken care of.
>>
>> The ip address listed above is a dsl connected home user. One of our 
>> salesmen.
>>
>> There is no email server at this address so I am not able to use the 
>> removal system.
>>
>> I am the administrator for All Printing Resources, our mail server 
>> resides at the corporate location.
>>
>> What should we do?
> 
> I believe, you should stop apply third-party "blacklists" to your own 
> salesmen. If a client is authentificated, it should not be checked 
> against external blacklists. Just the order of rules in your MTA.
> 
> Or, possibly, I do not understand the problem. How does this listing 
> affects your salesman mail? What server rejects it?
> 
> Alexey
> DSBL volunteer
> 
>>
>>
>>  ---
>>
>> Best Regards,
>> Dennis Dicosola
>>
>> All Printing Resources
>> http://www.teamflexo.com
>> 140 West Lake Drive
>> Glendale Heights IL. 60139
>>
>> Phone - 630-784-3115 ext-55
>> Cell - 847-922-0136
>>
>> CONFIDENTIALITY NOTICE:
>> This is a transmission from All Printing Resources, and may contain 
>> information which is confidential and proprietary. If you are not the 
>> addressee, any disclosure, copying or distribution or use of the 
>> contents of this message is expressly prohibited.
>> If you feel that you have received this transmission in error, please 
>> delete it now, and notify us immediately at 630-784-3115.
>>
>> CAUTION:
>> Internet and e-mail communications are the property of All Printing 
>> Resources and we reserve the right to retrieve and read any message 
>> created, sent and received.
>> All Printing Resources reserves the right to monitor messages by 
>> authorized All Printing Resources Associates at any time without any
> further consent.
>