spamhaus

Spamhaus does it, domain registrars collude with Spamhaus and threatwave/bounce.io.

Have all of those IP addresses published as related to the hack been marked as dirty by Spamhaus e.a.

As an example, here is the Spamhaus entry for one of the IPs.

Oracle ended up in spamhaus, after weeks, I finally got I touch with their admin.

If, as an end user, your IP address is on the Spamhaus PBL, you can have it removed yourself simply by submitting a request online.

The issue (as illustrated by other blacklist cases like Spamhaus v.

If you don't trust Google to maintain the blacklist then you change a setting and your computer looks up foo.com.blacklist.microsoft.com or foo.com.blacklist.spamhaus.org or whatever else instead.

Not getting listed on Spamhaus was a constant battle.

Many ISPs add their own consumer/residential netblocks to some blacklists (such as the Spamhaus PBL [0]) in order to help prevent spam from originating from the PCs of compromised users.

I'm also happy with Spamhaus Zen generally, but spam sent via Gmail is one category of email it won't stop, since it only blacklists pure spam sources, and Gmail is obviously a legitimate mailhost.

If it took them 3 months to notice no mail was being sent at all, imagine how long it's going to take them to figure out that their IP is blacklisted in Spamhaus or any number of other deliverability issues?

This is the entirety of the manual config I added on top of what Debian produced: # use maildir instead of mbox home_mailbox = Maildir/ # reject obvious spam smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_client_hostname, reject_rbl_client zen.spamhaus.org It has a very nice manual too, but I have not had to use most of it, because it just works out of the box.

"Many ISP's" don't actually block 25/TCP outbound but simply add their residential netblocks to, e.g., the Spamhaus PBL.

Not sure how the process works, but what about getting their domain added to Spamhaus's lists?

Spamhaus apparently automatically scans for this type of suspicious behavior and falgged like 20,000 ips.

Please make sure that your domain or email address is not blacklisted by Spamhaus.