Hopefully someone can point me in the right direction.
I have inherited a poorly maintained SMTP server with lots of spam going through this server everyday. I have slowly been killing off spammers mail accounts and removing the server from various blockilists. And the server has not been sending any spam for months now. I'm also able to send mail to almost everyone again, except to emails with the "gov.mb.ca" domain. I get the reply "refused by EDS blackhole list".
My question is, how do I get my server unblocked by the Manitoba government ?
Mike Sierks
As far as I can gather from searching around on the internet, EDS is a rather generic acronym for e-mail defense service, of which there seem to be a few around. So that doesn't really help narrow down exactly which block list your server is still on.
There used to be a multi-list checker at openrbl.org, but that doesn't seem to be there anymore. However, the domain did redirect me (in probably what is the first case I've seen of a useful redirection of a lapsed DNS domain to a "parking page") to another site that eventually led me here...
http://www.mxtoolbox.com/blacklists.aspx
They have a multi-blacklist checker, in which you can check your server's IP address against many lists. The initial scan is against 35 lists, but if you click on the link "Check All Blacklists" you'll get a test against over 100 lists. There is also another multi-blacklist checker here: http://whatismyipaddress.com/blacklist-check . If neither checker finds any, or if one does and after getting off those lists you still can't send to gov.mb.ca, I'd suggest getting in touch with them to find out who their blackhole list provider is.
On 07/20/2012 11:02 AM, Michael Sierks wrote:
Hopefully someone can point me in the right direction.
I have inherited a poorly maintained SMTP server with lots of spam going through this server everyday. I have slowly been killing off spammers mail accounts and removing the server from various blockilists. And the server has not been sending any spam for months now. I'm also able to send mail to almost everyone again, except to emails with the "gov.mb.ca" domain. I get the reply "refused by EDS blackhole list".
My question is, how do I get my server unblocked by the Manitoba government ?
Mike Sierks
It could also be EDS, the guys that take care of the government's IT (now owned by HP)
$ dig mx gov.mb.ca ... gov.mb.ca. 3600 IN MX 10 plman.mail.eds.com. gov.mb.ca. 3600 IN MX 10 ahman.mail.eds.com.
But yea, make sure you're off all the blacklists (this is not always possible, some demand money and can be ignored), then try to find an IT contact there to talk to. https://www.gov.mb.ca/contact/ might be a good start, I'd phone, not email though, as you're going to get bounced around a bunch.
Sean
On Fri, Jul 20, 2012 at 12:01 PM, Gilles Detillieux < grdetil@scrc.umanitoba.ca> wrote:
As far as I can gather from searching around on the internet, EDS is a rather generic acronym for e-mail defense service, of which there seem to be a few around. So that doesn't really help narrow down exactly which block list your server is still on.
There used to be a multi-list checker at openrbl.org, but that doesn't seem to be there anymore. However, the domain did redirect me (in probably what is the first case I've seen of a useful redirection of a lapsed DNS domain to a "parking page") to another site that eventually led me here...
http://www.mxtoolbox.com/**blacklists.aspxhttp://www.mxtoolbox.com/blacklists.aspx
They have a multi-blacklist checker, in which you can check your server's IP address against many lists. The initial scan is against 35 lists, but if you click on the link "Check All Blacklists" you'll get a test against over 100 lists. There is also another multi-blacklist checker here: http://whatismyipaddress.com/**blacklist-checkhttp://whatismyipaddress.com/blacklist-check. If neither checker finds any, or if one does and after getting off those lists you still can't send to gov.mb.ca, I'd suggest getting in touch with them to find out who their blackhole list provider is.
On 07/20/2012 11:02 AM, Michael Sierks wrote:
Hopefully someone can point me in the right direction.
I have inherited a poorly maintained SMTP server with lots of spam going through this server everyday. I have slowly been killing off spammers mail accounts and removing the server from various blockilists. And the server has not been sending any spam for months now. I'm also able to send mail to almost everyone again, except to emails with the "gov.mb.ca" domain. I get the reply "refused by EDS blackhole list".
My question is, how do I get my server unblocked by the Manitoba government ?
Mike Sierks
-- Gilles R. Detillieux E-mail:<grdetil@scrc.**umanitoba.cagrdetil@scrc.umanitoba.ca
Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/ Dept. Physiology, U. of Manitoba Winnipeg, MB R3E 0J9 (Canada)
______________________________**_________________ Roundtable mailing list Roundtable@muug.mb.ca http://www.muug.mb.ca/mailman/**listinfo/roundtablehttp://www.muug.mb.ca/mailman/listinfo/roundtable
Well I phoned the Manitoba government and 4 numbers later. I was advised to get a government employee to open a support ticket as only government employees can do so. Looks like I have a few more phone calls to make before this will get resolve. And maybe a dozen more run-arounds.
Thanks for your help,
Mike Sierks
On 07/20/12 12:13, Sean Walberg wrote:
It could also be EDS, the guys that take care of the government's IT (now owned by HP)
$ dig mx gov.mb.ca http://gov.mb.ca ... gov.mb.ca http://gov.mb.ca.3600INMX10 plman.mail.eds.com http://plman.mail.eds.com. gov.mb.ca http://gov.mb.ca.3600INMX10 ahman.mail.eds.com http://ahman.mail.eds.com.
But yea, make sure you're off all the blacklists (this is not always possible, some demand money and can be ignored), then try to find an IT contact there to talk to. https://www.gov.mb.ca/contact/ might be a good start, I'd phone, not email though, as you're going to get bounced around a bunch.
Sean
On Fri, Jul 20, 2012 at 12:01 PM, Gilles Detillieux <grdetil@scrc.umanitoba.ca mailto:grdetil@scrc.umanitoba.ca> wrote:
As far as I can gather from searching around on the internet, EDS is a rather generic acronym for e-mail defense service, of which there seem to be a few around. So that doesn't really help narrow down exactly which block list your server is still on. There used to be a multi-list checker at openrbl.org <http://openrbl.org>, but that doesn't seem to be there anymore. However, the domain did redirect me (in probably what is the first case I've seen of a useful redirection of a lapsed DNS domain to a "parking page") to another site that eventually led me here... http://www.mxtoolbox.com/blacklists.aspx They have a multi-blacklist checker, in which you can check your server's IP address against many lists. The initial scan is against 35 lists, but if you click on the link "Check All Blacklists" you'll get a test against over 100 lists. There is also another multi-blacklist checker here: http://whatismyipaddress.com/blacklist-check . If neither checker finds any, or if one does and after getting off those lists you still can't send to gov.mb.ca <http://gov.mb.ca>, I'd suggest getting in touch with them to find out who their blackhole list provider is. On 07/20/2012 11:02 AM, Michael Sierks wrote: Hopefully someone can point me in the right direction. I have inherited a poorly maintained SMTP server with lots of spam going through this server everyday. I have slowly been killing off spammers mail accounts and removing the server from various blockilists. And the server has not been sending any spam for months now. I'm also able to send mail to almost everyone again, except to emails with the "gov.mb.ca <http://gov.mb.ca>" domain. I get the reply "refused by EDS blackhole list". My question is, how do I get my server unblocked by the Manitoba government ? Mike Sierks -- Gilles R. Detillieux E-mail:<grdetil@scrc.umanitoba.ca <mailto:grdetil@scrc.umanitoba.ca>> Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/ Dept. Physiology, U. of Manitoba Winnipeg, MB R3E 0J9 (Canada) _______________________________________________ Roundtable mailing list Roundtable@muug.mb.ca <mailto:Roundtable@muug.mb.ca> http://www.muug.mb.ca/mailman/listinfo/roundtable-- Sean Walberg <sean@ertw.com mailto:sean@ertw.com> http://ertw.com/
Roundtable mailing list Roundtable@muug.mb.ca http://www.muug.mb.ca/mailman/listinfo/roundtable
Yikes. That doesn't sound like a good time.
I would heavily suggest building a replacement SMTP server and migrating good users over instead of weeding out the bad ones. If it is that bad you have to assume the machine is compromised and maybe an IP change/swap is in order. Most RBL's block my IP and/or net block so a quick fix out of a black hole could be there.
-
Gilles Detillieux -
Michael Sierks -
Sean Cody -
Sean Walberg