Home > World Of ICT > De-list IP Public mail server dari spamhaust

De-list IP Public mail server dari spamhaust


Ceritanya hari ini dikumplen banyak orang karena email yang dikirim ke domain yahoo dan ke beberapa domain lain tidak bisa terkirim dengan alasan direject oleh mail server tujuan.

Proses penyelidikan pun dimulai, saya coba sendiri dengan mencoba kirim mail ke mail yahoo saya,  ternyata sukses rek… dari sekian banyak relay mail yahoo beruntung ada satu yg menerima email saya yang dari Unila. nah lho yang lain pada ngeblok dan menginformasikan bahwa IP unila terlist dalam database spamhaust.tail -f /var/log/maillog

to=<Fathir_blackstar@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.108.116.109]:25, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.116.109] refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 202.43.189.194, because the ip is in Spam haus’s list; see http://postmaster.yahoo.com/550-bl23.html)

to=<add_chia_yuuk@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.108.116.109]:25, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.116.109]
refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 202.43.189.194, because the ip is in Spamhaus’s list; see http://postmaster.yahoo.com/550-bl23.html)

to=<badbayu@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.108.116.109]:25, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.11

Kacau nih, seluruh email nyangkut semua.  langsung saya menuju ke TKP untuk men-Delist IP mail server unila.

http://www.spamhaus.org/query/bl?ip=202.43.189.194

Hasilnya adalah sebagai berikut;
http://www.spamhaus.org/query/bl?ip=202.43.189.194
202.43.189.194 is not listed in the SBL
202.43.189.194 is not listed in the PBL
202.43.189.194 is listed in the XBL, because it appears in:
Ternyata IP unila termasuk dalam list XBL,  next step mengisi form untuk meremove IP di database XBL,  dialamat berikut  http://cbl.abuseat.org/removeNEW.cgi?ip=202.43.189.194&timestamp=1301460644&hash=6b11ac981ec399d8def0b1247867b2a9

Muncul notifikasi berikut yang menandakan bahwa ternyata proses delist ini juga membutuhkan waktu, solusi sementara adalah menggunakan IP MX secondary untuk traffik mail ke luar, alhamdulillah solve, sembari menunggu  approval delist ini.

Removal of the IP address 202.43.189.194 from the CBL is now pending.
This means that your removal request has been accepted and your IP address WILL be delisted as soon as possible.

The CBL lookup page will already show that the IP address has been removed, but it takes a little longer for mail servers to notice the removal.
It should take no more than an hour or two before all servers that use the CBL notice the removal. Do not contact us to try to speed up removal – it’s not possible to speed it up any more than it already is. Please be patient.

Tak cukup hingga disini saja, saya pun terpaksa mengisi kembali form permohonan delist spam di yahoo.

http://help.yahoo.com/l/us/yahoo/mail/postmaster/defer.html

SPAM…OH..SPAM…😦

Mar 30 00:04:16 ns1 postfix/smtpd[19410]: NOQUEUE: reject_warning: RCPT from unknown[192.168.1.2]: 450 4.7.1 Client host re
jected: cannot find your hostname, [192.168.1.2]; from=<sentto-1407263-262175-1301418238-dete=unila.ac.id@returns.groups.ya
hoo.com> to=<dete@groups.unila.ac.id> proto=ESMTP helo=<maiser.unila.ac.id>
Mar 30 00:04:16 ns1 postfix/qmgr[1271]: 54C6833E2C: from=<sentto-1407263-262175-1301418238-dete=unila.ac.id@returns.groups.
yahoo.com>, size=35077, nrcpt=1 (queue active)
Mar 30 00:05:25 ns1 postfix/smtp[19750]: B7C0B33ED3: to=<Fathir_blackstar@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.10
8.116.109]:25, delay=38208, delays=38208/0.01/0.44/0, dsn=4.7.1, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.116.1
09] refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 202.43.189.194, because the ip is in Spam
haus’s list; see http://postmaster.yahoo.com/550-bl23.html)
Mar 30 00:05:25 ns1 postfix/smtp[19750]: B7C0B33ED3: to=<add_chia_yuuk@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.108.1
16.109]:25, delay=38208, delays=38208/0.01/0.44/0, dsn=4.7.1, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.116.109]
refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 202.43.189.194, because the ip is in Spamhau
s’s list; see http://postmaster.yahoo.com/550-bl23.html)
Mar 30 00:05:25 ns1 postfix/smtp[19750]: B7C0B33ED3: to=<and_wind2983@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.108.11
6.109]:25, delay=38208, delays=38208/0.01/0.44/0, dsn=4.7.1, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.116.109]
refused to talk to me: 553 5.7.1 [BL21] Connections will not be accepted from 202.43.189.194, because the ip is in Spamhaus
‘s list; see http://postmaster.yahoo.com/550-bl23.html)
Mar 30 00:05:25 ns1 postfix/smtp[19750]: B7C0B33ED3: to=<badbayu@yahoo.co.id>, relay=mx1.mail.sg1.yahoo.com[124.108.116.109
]:25, delay=38208, delays=38208/0.01/0.44/0, dsn=4.7.1, status=deferred (host mx1.mail.sg1.yahoo.com[124.108.11
  1. dikshie
    March 30, 2011 at 5:26 am

    lebih banyak mana: spam diterima unila atau spam yng dikirim unila?🙂

  2. March 30, 2011 at 2:16 pm

    yang dikirim lumayan banyak, tapi SPAM yang diterima lebih banyak lagii. untung juga pakey layanan free DNSBL jadi lumayan banyak SPAM yang kefilter hehe.

    • dikshie
      March 31, 2011 at 5:13 am

      coba pake fitur postscreen dari postfix-2.8.x

      • April 1, 2011 at 8:36 am

        Wah menarik ini bang. deploy di mesin laen dulu, kalau OK baru kita upgrade. hehe

  3. joe
    April 15, 2011 at 12:16 pm

    bisa juga di http://cbl.abuseat.org/lookup.cgi
    tapi ya sama aja, tetep nunggu…
    dan kalo udah pernah kena biasanya gak mau langsung di-delisting lagi, harus contact admin…

  4. April 27, 2011 at 2:51 am

    Yap betul itu bung joe..

  1. August 22, 2011 at 3:19 am

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: