RE: Website link for 168.187.78.193

Dear Alexey,

I checked the security measured we applied to our mail server and we neve=
r find anything suspicious.

In your previous mail you stated that " Just because you do not fix the v=
ulnerability in your system. It still=20
works." Could you please tell me what vulnerability you experiencing from=
 my mail server?

I can see DSBL is only blocking my mail server IP.

I can't keep continue listing of my mail server IP on your block list. No=
w it's affecting our day to day mailing activity.

Regards,
Bobin

-----Original Message-----
From: Alexey Lobanov [mailto:[email protected]]=20
Sent: 28/10/2007 2:09 PM
To: Bobin Michael
Cc: [email protected]
Subject: Re: [DSBL-Contact] Website link for 168.187.78.193

Hello.

28.10.2007 12:35, Bobin Michael =D0=BF=D0=B8=D1=88=D0=B5=D1=82:

> Dear DSBL,
>=20
> =20
>=20
> This related with the listing of my mail server IP in your list.
>=20
> =20
>=20
> I wonder why am listing again and again?

Just because you do not fix the vulnerability in your system. It still=20
works.

>=20
> =20
>=20
> I already removed my mail server from your list 2 times. Now again it's
> showing mine listed on your list.
>=20
> =20
>=20
> Can please tell me why it's happening again and again? what should I do
> to avoid such listing in the future?

Please:

1. Read once more "Extended transport information" in the relayed tests.
All them are available in "Messages from this host" section at
http://dsbl.org/listing?168.187.78.193; the last test messahe was=20
relayed few minutes ago from RU to NY.US.

2. Read some background at
http://dsbl.org/relay-methods#SMTPAUTHrelaying and
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=3DROK2669
During last weeks this technique is being used for a massive "phishing"
campaign, and your server seems to be one of many participants.

3. Make FULL internal security audit. We have absolutely no reasons to
hope that "test" is your only vulnerable account and that this
severe security hole had been used for SMTP access only.

4. Repeat the delisting request after Oct 31 05:35:21 UTC.

Alexey
DSBL volunteer

>=20
> =20
>=20
> Regards,
>=20
> Bobin
>=20
> =20
>=20
> =20
>=20
> =20
>=20
> =20
>=20
>=20
>=20
> *************************DISCLAIMER************************************=
******
> The information contained in this e-mail message and any attached files=
=20
> are confidential information and intended solely for the use of the=20
> individual or entity to whom they are addressed.This transmission may=20
> contain information that is privileged,confidential or exempt from=20
> disclosure under applicable law. If you have received this e-mail in er=
ror,=20
> please notify the sender immediately and delete all copies. If you are =
not=20
> the intended recipient, any disclosure,copying, distribution, or use of=
 the
> information contained herein is STRICTLY PROHIBITED.
> Path accepts no responsibility for any errors ,omissions computer virus=
es=20
> and other defects.
> ***********************************************************************=
******
>=20


*************************DISCLAIMER**************************************=
****=0AThe information contained in this e-mail message and any attached =
files =0Aare confidential information and intended solely for the use of =
the =0Aindividual or entity to whom they are addressed.This transmission =
may =0Acontain information that is privileged,confidential or exempt from=
 =0Adisclosure under applicable law. If you have received this e-mail in =
error, =0Aplease notify the sender immediately and delete all copies. If =
you are not =0Athe intended recipient, any disclosure,copying, distributi=
on, or use of the=0Ainformation contained herein is STRICTLY PROHIBITED.=0A=
Path accepts no responsibility for any errors ,omissions computer viruses=
 =0Aand other defects.=0A************************************************=
*****************************