Mailing List Archive: SpamAssassin: users

Problems sending Abuse mails to Twitter

Index | Next | Previous | View Threaded

linux4michelle at tamay-dogan

Nov 26, 2009, 6:55 AM

Post #1 of 6 (556 views)
Permalink

Problems sending Abuse mails to Twitter

Hello,

Currently I am bombed by more then 100 Twitter messages per day and
whenever I send a complaint to <abuse [at] twiter> I get a message
from Google back:

----[ STDIN ]-----------------------------------------------------------
Date: Sun, 22 Nov 2009 19:30:36 +0000
From: Mail Delivery Subsystem <mailer-daemon [at] googlemail>
To: tamay.dogan [at] tamay-dogan
Subject: Delivery Status Notification (Failure)

Delivery to the following recipient failed permanently:

abuse [at] twitter

Technical details of permanent failure:
Message rejected. Please visit http://www.google.com/mail/help/bulk_mail.html to review our Bulk Email Senders Guidelines.

----- Original message -----

Received: by 10.216.91.81 with SMTP id g59mr1250353wef.128.1258918236730;
Sun, 22 Nov 2009 11:30:36 -0800 (PST)
Received: by 10.216.91.81 with SMTP id g59mr1250352wef.128.1258918236699;
Sun, 22 Nov 2009 11:30:36 -0800 (PST)
Return-Path: <tamay.dogan [at] tamay-dogan>
Received: from webmail.codefoundry.com (webmail.codefoundry.com [62.231.42.10])
by mx.google.com with ESMTP id m5si7690370gve.12.2009.11.22.11.30.36;
Sun, 22 Nov 2009 11:30:36 -0800 (PST)
Received-SPF: neutral (google.com: 62.231.42.10 is neither permitted nor denied by best guess record for domain of tamay.dogan [at] tamay-dogan) client-ip=62.231.42.10;
Authentication-Results: mx.google.com; spf=neutral (google.com: 62.231.42.10 is neither permitted nor denied by best guess record for domain of tamay.dogan [at] tamay-dogan) smtp.mail=tamay.dogan [at] tamay-dogan
Received: from mail.private.tamay-dogan.net ([::ffff:82.113.106.82])
(AUTH: CRAM-SHA256 konzack.michelle.tamay-catchall [at] codefoundry)
by webmail.codefoundry.com with esmtp; Sun, 22 Nov 2009 19:38:25 +0000
id 002BC9CA.4B099335.00005B16
Received: from michelle1.private.tamay-dogan.net (michelle1.private.tamay-dogan.net [::ffff:192.168.0.91])
by mail.private.tamay-dogan.net with esmtp; Sun, 22 Nov 2009 20:30:03 +0100
id 0002BF43.4B09913C.00002A92
Received: by michelle1.private.tamay-dogan.net (sSMTP sendmail emulation); Sun, 22 Nov 2009 20:30:04 +0100
Subject: Re: Mohammad Jafar wants to keep up with you on Twitter
Message-Id: <iLjDO.A.2ZD.8EZCLB [at] michelle>
From: Tamay Dogan <tamay.dogan [at] tamay-dogan>
Sender: tamay.dogan [at] tamay-dogan
Date: Sun, 22 Nov 2009 20:30:04 +0100
To: abuse [at] twitter

------------------------------------------------------------------------

Does someone know whats going on here?

Since today I have the same problem with Facebook and Blogger...
Collect since ~07:00 CET nearly 400 messages from them.

Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant

--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
<http://www.tamay-dogan.net/> Michelle Konzack
<http://www.can4linux.org/> Apt. 917
<http://www.flexray4linux.org/> 50, rue de Soultz
Jabber linux4michelle [at] jabber 67100 Strabourg/France
IRC #Debian (irc.icq.com) Tel. DE: +49 177 9351947
ICQ #328449886 Tel. FR: +33 6 61925193

Attachments:

signature.pgp (0.18 KB)

kremels at kreme

Nov 26, 2009, 8:11 AM

Post #2 of 6 (535 views)
Permalink

Re: Problems sending Abuse mails to Twitter [In reply to]

On 26-Nov-2009, at 07:55, Michelle Konzack wrote:
> Currently I am bombed by more then 100 Twitter messages per day and
> whenever I send a complaint to <abuse [at] twiter> I get a message
> from Google back:

What sort of messages from twitter?

--
'Do you know what they call a sausage-in-a-bun in Quirm?'
'No?' said Mr Tulip
'They called it le sausage-in-le-bun.'
'What, in a --ing foreign language? You're --ing kidding!' --The Truth

timo.schoeler at riscworks

Nov 26, 2009, 8:18 AM

Post #3 of 6 (535 views)
Permalink

Re: Problems sending Abuse mails to Twitter [In reply to]

thus LuKreme spake:
> On 26-Nov-2009, at 07:55, Michelle Konzack wrote:
>> Currently I am bombed by more then 100 Twitter messages per day and
>> whenever I send a complaint to <abuse [at] twiter> I get a message
>> from Google back:
>
> What sort of messages from twitter?

Obviously status mails of any kind, e.g. 'x sent you a direct message'
or 'y is now following you on Twitter'.

@Michelle Konzack: What about disabling notification emails and/or
enable the 'protect my tweets' feature so that not every honk on the
planet subscribes you (and bombs you with twitter emails)...?

HTH,

Timo

kremels at kreme

Nov 26, 2009, 8:26 AM

Post #4 of 6 (529 views)
Permalink

Re: Problems sending Abuse mails to Twitter [In reply to]

On 26-Nov-2009, at 09:18, Timo Schoeler wrote:
> thus LuKreme spake:
>> On 26-Nov-2009, at 07:55, Michelle Konzack wrote:
>>> Currently I am bombed by more then 100 Twitter messages per day and
>>> whenever I send a complaint to <abuse [at] twiter> I get a message
>>> from Google back:
>> What sort of messages from twitter?
>
> Obviously status mails of any kind, e.g. 'x sent you a direct message' or 'y is now following you on Twitter'.

Not obvious because 100+ a day is very excessive and these messages can be turned off on the account, which would make trying to block thm at the MTA rather silly.

I seem to recall Michelle saying before something abut not having a twitter account�

--
Han : Not a bad bit of rescuing, huh? You know, sometimes I
amaze even myself.
Leia: That doesn't sound too hard.

ilikeuce at bornefeld-ettmann

Nov 26, 2009, 10:20 AM

Post #5 of 6 (529 views)
Permalink

Re: Problems sending Abuse mails to Twitter [In reply to]

I could find your IP (82.113.106.21) on these lists :

b.barracudacentral.org 127.0.0.2
bl.spamcop.net 127.0.0.2
blackholes.five-ten-sg.com
82.113.106.21.misc.blackholes.five-ten-sg.com. 127.0.0.9
blocked.secnap.net 127.0.0.2
cbl.abuseat.org 127.0.0.2
dnsbl-1.uceprotect.net 127.0.0.2
dnsbl-2.uceprotect.net 127.0.0.2
dnsbl-3.uceprotect.net 127.0.0.2
dnsbl.inps.de 127.0.0.2
dnsbl.sorbs.net 127.0.0.7
hostkarma.junkemailfilter.com 127.0.0.2 127.0.1.1
no-more-funn.moensted.dk 127.0.0.1
noptr.spamrats.com 127.0.0.37
old.spam.dnsbl.sorbs.net 127.0.0.6
pbl.spamhaus.org 127.0.0.11
psbl.surriel.com 127.0.0.2
sbl-xbl.spamhaus.org 127.0.0.4
spam.dnsbl.sorbs.net 127.0.0.6
ubl.unsubscore.com 127.0.0.2
web.dnsbl.sorbs.net 127.0.0.7
xbl.spamhaus.org 127.0.0.4
zen.spamhaus.org 127.0.0.4 127.0.0.11

IP of your server (62.231.42.10) I found on these lists :

blocked.secnap.net 127.0.0.2
countries.nerd.dk 127.0.0.1
ips.backscatterer.org 127.0.0.2

your mail got 6.9 Points on my SA (sorry for the german text):

0.6 RCVD_IN_SORBS_WEB RBL: SORBS: Senderechner ist ein ungesicherter
WWW-Server
[82.113.106.82 listed in dnsbl.sorbs.net]
1.8 RCVD_IN_PSBL RBL: Received via a relay in PSBL Spamikaze
trap
[82.113.106.82 listed in psbl.surriel.com]
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Transportiert via Rechner in Liste von
www.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?82.113.106.82>]
0.5 RCVD_IN_BRBL RBL: Received via a relay in Barracuda BRBL
[82.113.106.82 listed in
bb.barracudacentral.org]
0.0 BAYES_50 BODY: Spamwahrscheinlichkeit nach
Bayes-Test: 40-60%
[score: 0.4896]
2.0 KHOP_DNSBL_BUMP Hits a trusted non-overlapping DNSBL

for me it seems that the MTA did a RBL lookup and rejected your mail due
to being listed

cheers
Ralph

Michelle Konzack schrieb:
> Hello,
>
> Currently I am bombed by more then 100 Twitter messages per day and
> whenever I send a complaint to <abuse [at] twiter> I get a message
> from Google back:
>
> ----[ STDIN ]-----------------------------------------------------------
> Date: Sun, 22 Nov 2009 19:30:36 +0000
> From: Mail Delivery Subsystem <mailer-daemon [at] googlemail>
> To: tamay.dogan [at] tamay-dogan
> Subject: Delivery Status Notification (Failure)
>
> Delivery to the following recipient failed permanently:
>
> abuse [at] twitter
>
> Technical details of permanent failure:
> Message rejected. Please visit http://www.google.com/mail/help/bulk_mail.html to review our Bulk Email Senders Guidelines.
>
> ----- Original message -----
>
> Received: by 10.216.91.81 with SMTP id g59mr1250353wef.128.1258918236730;
> Sun, 22 Nov 2009 11:30:36 -0800 (PST)
> Received: by 10.216.91.81 with SMTP id g59mr1250352wef.128.1258918236699;
> Sun, 22 Nov 2009 11:30:36 -0800 (PST)
> Return-Path: <tamay.dogan [at] tamay-dogan>
> Received: from webmail.codefoundry.com (webmail.codefoundry.com [62.231.42.10])
> by mx.google.com with ESMTP id m5si7690370gve.12.2009.11.22.11.30.36;
> Sun, 22 Nov 2009 11:30:36 -0800 (PST)
> Received-SPF: neutral (google.com: 62.231.42.10 is neither permitted nor denied by best guess record for domain of tamay.dogan [at] tamay-dogan) client-ip=62.231.42.10;
> Authentication-Results: mx.google.com; spf=neutral (google.com: 62.231.42.10 is neither permitted nor denied by best guess record for domain of tamay.dogan [at] tamay-dogan) smtp.mail=tamay.dogan [at] tamay-dogan
> Received: from mail.private.tamay-dogan.net ([::ffff:82.113.106.82])
> (AUTH: CRAM-SHA256 konzack.michelle.tamay-catchall [at] codefoundry)
> by webmail.codefoundry.com with esmtp; Sun, 22 Nov 2009 19:38:25 +0000
> id 002BC9CA.4B099335.00005B16
> Received: from michelle1.private.tamay-dogan.net (michelle1.private.tamay-dogan.net [::ffff:192.168.0.91])
> by mail.private.tamay-dogan.net with esmtp; Sun, 22 Nov 2009 20:30:03 +0100
> id 0002BF43.4B09913C.00002A92
> Received: by michelle1.private.tamay-dogan.net (sSMTP sendmail emulation); Sun, 22 Nov 2009 20:30:04 +0100
> Subject: Re: Mohammad Jafar wants to keep up with you on Twitter
> Message-Id: <iLjDO.A.2ZD.8EZCLB [at] michelle>
> From: Tamay Dogan <tamay.dogan [at] tamay-dogan>
> Sender: tamay.dogan [at] tamay-dogan
> Date: Sun, 22 Nov 2009 20:30:04 +0100
> To: abuse [at] twitter
>
> ------------------------------------------------------------------------
>
> Does someone know whats going on here?
>
> Since today I have the same problem with Facebook and Blogger...
> Collect since ~07:00 CET nearly 400 messages from them.
>
> Thanks, Greetings and nice Day/Evening
> Michelle Konzack
> Systemadministrator
> Tamay Dogan Network
> Debian GNU/Linux Consultant
>

stucki at mi

Nov 27, 2009, 3:11 AM

Post #6 of 6 (512 views)
Permalink

Re: Problems sending Abuse mails to Twitter [In reply to]

On Thu, 26 Nov 2009, Ralph Bornefeld-Ettmann wrote:

> I could find your IP (82.113.106.21) on these lists :
>
... ... ...
>
> IP of your server (62.231.42.10) I found on these lists :
>
> blocked.secnap.net 127.0.0.2
> countries.nerd.dk 127.0.0.1
> ips.backscatterer.org 127.0.0.2

Being 'suddenly rbl'ed seems also to happen if you create
(mostly unknowing) lots of backscatter. So if your server
was hit by a wave of bounces for a (faked) sender who FORWARDS
AWAY from your server to e.g. google, hotmail, web.de ...
Your server looks like a backscatter generator itself and
the big hostes block it.

We had this a few times already - (university scenario, lots
of usrs forwarding their mail 'home', i.e. freehosters)�so
some students addresses were abused as senders, backscatter
begun streaming in, forwarded to hotmail (gogle, whatever),
and they blacklisted us for 24h or even days. A while
we had an (on ~4h / off 24h -- repeat at inf)-Scenario because
during '24h-blocks the mail waited, then reenabled, then was
seen as 'flooding' - blocked again 24h ...

AND during these times we were definitely blocked from
any electronic contact to the company - and of course no
Phone Number given except 'User Support' (who does not
even know, what an MTA might be).

So dont' wonder, and may be don't forward fo a while
(asking students to NOT forward did help - implementig
one of tbe schemes to ALWAYS only send our OWN addresses
even when forwarding, would have been better, but that's
a completely different story)

Stucki

--
Christoph von Stuckrad * * |nickname |Mail <stucki [at] mi> \
Freie Universitaet Berlin |/_*|'stucki' |Tel(Mo.,Mi.):+49 30 838-75 459|
Mathematik & Informatik EDV |\ *|if online| (Di,Do,Fr):+49 30 77 39 6600|
Takustr. 9 / 14195 Berlin * * |on IRCnet|Fax(home): +49 30 77 39 6601/

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads