Discussion:
Block: Road Runner Internal IP blacklist 72.22.18.105
(too old to reply)
Clinton Popovich
2008-04-25 13:51:02 UTC
Permalink
Greetings all, I am having a bit of trouble with Road Runner, we have been
blocked repeatedly for email that I believe to have been sent out on the
19th. I have about 50,000 customers sitting behind this old mail server
currently. I have emailed back in forth with someone from roadrunner and
when he sends me back the spam example it is always from the 19th.



So far from the spam sent out on that day we have been blocked 5 times.



Does anyone have a contact for Road Runner that I might be able to have.



Thanks,

Clinton Popovich
Systems Administrator
Consolidated Communications, Inc.
Formerly Nauticom Internet Services
Tel: 724-933-9540
Fax: 724-933-9888
Email: <mailto:***@consolidated.com>
***@consolidated.com

Road runner bounce example.
The original message was received at Fri, 25 Apr 2008 08:43:41 -0400 (EDT)
from 5.ksyr6.xdsl.nauticom.net [209.195.174.38]
----- The following addresses had permanent fatal errors -----
(reason: 550-cdptpa-mxlb.mail.rr.com)
----- Transcript of session follows -----
<<< 550-cdptpa-mxlb.mail.rr.com
<<< 550 ERROR: Mail Refused - 72.22.18.105 - See
http://security.rr.com/cgi-bin/block-lookup?72.22.18.105
<<< 550-cdptpa-mxlb.mail.rr.com
<<< 550 ERROR: Mail Refused - 72.22.18.105 - See
http://security.rr.com/cgi-bin/block-lookup?72.22.18.105
554 5.0.0 Service unavailable
Matthew Evans
2008-04-25 14:05:07 UTC
Permalink
Road Runner utilizes a volume based spam block from my understanding. If you send over X amount of email in Y amount of time, they block you. You need to create a rule that staggers the number of messages you send to all rr.com domains so as to not trigger the threshold and become blocked. See here for the limits: http://security.rr.com/spam.htm#ratelimit

Here's a link to get unblocked: http://security.rr.com/mail_blocks.htm

Good luck.


Matthew Evans, MCSA
Alpha Theory | "the right decision, every time."

2201 Coronation Blvd., Suite 140
Charlotte, NC 28227
www.alphatheory.com

ALPHA THEORY QUICK DEMO (click here)


-----Original Message-----
From: Clinton Popovich [mailto:***@nauticom.net]
Sent: Friday, April 25, 2008 9:51 AM
To: ***@nanog.org
Subject: [NANOG] Block: Road Runner Internal IP blacklist 72.22.18.105

Greetings all, I am having a bit of trouble with Road Runner, we have been
blocked repeatedly for email that I believe to have been sent out on the
19th. I have about 50,000 customers sitting behind this old mail server
currently. I have emailed back in forth with someone from roadrunner and
when he sends me back the spam example it is always from the 19th.



So far from the spam sent out on that day we have been blocked 5 times.



Does anyone have a contact for Road Runner that I might be able to have.



Thanks,

Clinton Popovich
Systems Administrator
Consolidated Communications, Inc.
Formerly Nauticom Internet Services
Tel: 724-933-9540
Fax: 724-933-9888
Email: <mailto:***@consolidated.com>
***@consolidated.com

Road runner bounce example.
The original message was received at Fri, 25 Apr 2008 08:43:41 -0400 (EDT)
from 5.ksyr6.xdsl.nauticom.net [209.195.174.38]
----- The following addresses had permanent fatal errors -----
(reason: 550-cdptpa-mxlb.mail.rr.com)
----- Transcript of session follows -----
<<< 550-cdptpa-mxlb.mail.rr.com
<<< 550 ERROR: Mail Refused - 72.22.18.105 - See
http://security.rr.com/cgi-bin/block-lookup?72.22.18.105
<<< 550-cdptpa-mxlb.mail.rr.com
<<< 550 ERROR: Mail Refused - 72.22.18.105 - See
http://security.rr.com/cgi-bin/block-lookup?72.22.18.105
554 5.0.0 Service unavailable
Bjørn Mork
2008-04-25 14:24:21 UTC
Permalink
Post by Matthew Evans
Road Runner utilizes a volume based spam block from my
understanding. If you send over X amount of email in Y amount of time,
they block you. You need to create a rule that staggers the number of
messages you send to all rr.com domains so as to not trigger the
http://security.rr.com/spam.htm#ratelimit
So they'll block all the major ISPs smtp relays, but not the infected
PCs used to inject spam? Smart. Do their customers really accept this?


Bjørn
Clinton Popovich
2008-04-25 15:20:45 UTC
Permalink
This issue has been resolved thanks all!

Clinton Popovich
Systems Administrator
Consolidated Communications, Inc.
Formerly Nauticom Internet Services
Tel: 724-933-9540
Fax: 724-933-9888
Email: ***@consolidated.com


-----Original Message-----
From: Bjørn Mork [mailto:***@mork.no]
Sent: Friday, April 25, 2008 10:24 AM
To: Matthew Evans
Cc: Clinton Popovich; ***@nanog.org
Subject: Re: [NANOG] Block: Road Runner Internal IP blacklist 72.22.18.105
Post by Matthew Evans
Road Runner utilizes a volume based spam block from my
understanding. If you send over X amount of email in Y amount of time,
they block you. You need to create a rule that staggers the number of
messages you send to all rr.com domains so as to not trigger the
http://security.rr.com/spam.htm#ratelimit
So they'll block all the major ISPs smtp relays, but not the infected
PCs used to inject spam? Smart. Do their customers really accept this?


Bjørn

Clinton Popovich
2008-04-25 14:40:44 UTC
Permalink
Honestly I doubt we are blasting Road Runner that hard. When I look thru the
log files it really does not look that bad except for on the 19th. So I
would have to say this is not how they have chosen to block me.

Clinton Popovich
Systems Administrator
Consolidated Communications, Inc.
Formerly Nauticom Internet Services
Tel: 724-933-9540
Fax: 724-933-9888
Email: ***@consolidated.com


-----Original Message-----
From: Matthew Evans [mailto:***@alphatheory.com]
Sent: Friday, April 25, 2008 10:05 AM
To: Clinton Popovich; ***@nanog.org
Subject: RE: [NANOG] Block: Road Runner Internal IP blacklist 72.22.18.105

Road Runner utilizes a volume based spam block from my understanding. If you
send over X amount of email in Y amount of time, they block you. You need to
create a rule that staggers the number of messages you send to all rr.com
domains so as to not trigger the threshold and become blocked. See here for
the limits: http://security.rr.com/spam.htm#ratelimit

Here's a link to get unblocked: http://security.rr.com/mail_blocks.htm

Good luck.


Matthew Evans, MCSA
Alpha Theory | "the right decision, every time."

2201 Coronation Blvd., Suite 140
Charlotte, NC 28227
www.alphatheory.com

ALPHA THEORY QUICK DEMO (click here)


-----Original Message-----
From: Clinton Popovich [mailto:***@nauticom.net]
Sent: Friday, April 25, 2008 9:51 AM
To: ***@nanog.org
Subject: [NANOG] Block: Road Runner Internal IP blacklist 72.22.18.105

Greetings all, I am having a bit of trouble with Road Runner, we have been
blocked repeatedly for email that I believe to have been sent out on the
19th. I have about 50,000 customers sitting behind this old mail server
currently. I have emailed back in forth with someone from roadrunner and
when he sends me back the spam example it is always from the 19th.



So far from the spam sent out on that day we have been blocked 5 times.



Does anyone have a contact for Road Runner that I might be able to have.



Thanks,

Clinton Popovich
Systems Administrator
Consolidated Communications, Inc.
Formerly Nauticom Internet Services
Tel: 724-933-9540
Fax: 724-933-9888
Email: <mailto:***@consolidated.com>
***@consolidated.com

Road runner bounce example.
The original message was received at Fri, 25 Apr 2008 08:43:41 -0400 (EDT)
from 5.ksyr6.xdsl.nauticom.net [209.195.174.38]
----- The following addresses had permanent fatal errors -----
(reason: 550-cdptpa-mxlb.mail.rr.com)
----- Transcript of session follows -----
<<< 550-cdptpa-mxlb.mail.rr.com
<<< 550 ERROR: Mail Refused - 72.22.18.105 - See
http://security.rr.com/cgi-bin/block-lookup?72.22.18.105
<<< 550-cdptpa-mxlb.mail.rr.com
<<< 550 ERROR: Mail Refused - 72.22.18.105 - See
http://security.rr.com/cgi-bin/block-lookup?72.22.18.105
554 5.0.0 Service unavailable
Loading...