Blog for hpHosts, and whatever else I feel like writing about ....

Tuesday, 17 December 2013 OI, Stop filtering your abuse address!

I sometimes get complaints from site owners, hosting co's, claiming they've never received an abuse report, and invariably, the problem is due to their contact address filtering using SURBL, SpamHaus etc etc. These are normally something I recommend, but in the case of ASNs, hosting companies and registrars, or indeed, any site/service/company that provides facilities for others to use their services etc, they should NEVER be filtering their bleedin abuse address - it defeats the object of their having an abuse address (and no - it doesn't make the blindest bit of difference if the report is sent with the offending content in an attached file, body of the email or whether the content is "as is" or "defanged" (in the case of URLs)).

The latest idiotic hosting company doing this, is, whose mail server rejected an abuse report a few minutes ago, due to their using the SURBL and SpamHaus blacklists;

Tue 2013-12-17 10:39:01: --> RCPT To:<>
Tue 2013-12-17 10:39:02: <-- 250 2.1.5 Address Okay
Tue 2013-12-17 10:39:02: --> DATA
Tue 2013-12-17 10:39:02: <-- 354 Start mail input; end with <CRLF>.<CRLF>
Tue 2013-12-17 10:39:02: Sending <xxxxxxxxxxxxxxxxxxxxxxxx\pd50002750106.msg> to []
Tue 2013-12-17 10:39:02: Transfer Complete
Tue 2013-12-17 10:39:03: <-- 521 A URL in the email is Blacklisted by SURBL: locked, on lists [mw], See:
Tue 2013-12-17 10:39:03: --> QUIT

Tue 2013-12-17 10:38:35: --> RCPT To:<>
Tue 2013-12-17 10:38:37: <-- 250 2.1.5 Address Okay
Tue 2013-12-17 10:38:37: --> DATA
Tue 2013-12-17 10:38:37: <-- 354 Start mail input; end with <CRLF>.<CRLF>
Tue 2013-12-17 10:38:37: Sending <xxxxxxxxxxxxxxxxxxxxxxxx\pd50002750098.msg> to []
Tue 2013-12-17 10:38:37: Transfer Complete
Tue 2013-12-17 10:38:38: <-- 521 A URL ( in the email resolved to a blacklisted IP: 521 The IP is Blacklisted by ttp:// -- -- .

No comments: