Method to remove subnets from SBL or how we spammed Spamhaus
I think everyone knows how SBL Spamhaus and his smaller brothers are formed. So our subnets are in the SBL Spamhaus. All subnets . Includes IP mail server.
How do we solve this problem? Welcome under cat.
The background is such that there was a client involved in fast flux (immediately took 6 servers). After several abuses from Spamhaus, we promptly denied him the services. But proving this to Spamhaus turned out to be a very difficult task.
')
Subnets were in SBL for more than two months, they started blocking the subnets of our LIR. Spamhaus himself did not respond to our attempts to get in touch with them.
Here is what we decided to do:
1) All our clients have been sent a mailing list with a request to write a letter to Spamhaus that they do not deal with spam and are outraged by the fact that their IP addresses are entered into the SBL.
2) In the letter, depending on what service the client uses, he had to indicate his IP addresses: whether it is hosting — IP of the mail server, VPS / VDS, dedicated server or colocation — IP addresses issued to him as part of this service .
3) The most advanced and understanding clients were immediately informed that they sent letters to Spamhaus with the required content.
4) The rest unsubscribed to provide the text of the letter in English. We each compiled a separate unique text and sent in response to the letter.
5) They asked our LIR to write a letter to them too.
6) We personally asked our foreign clients and partners to write to Spamhaus. It should be noted that among them were quite large foreign companies, the recipients of our clients. They wrote that they have known us for a long time and are confident that we are not engaged in spamming.
I must say that we did not expect such a reaction. The day after the authorized stock, a letter came from a question from Spamhaus about whether we have customers who send spam. After our negative reply, the SBL was cleared from our subnets.
Do not abuse this method.
How do we solve this problem? Welcome under cat.
The background is such that there was a client involved in fast flux (immediately took 6 servers). After several abuses from Spamhaus, we promptly denied him the services. But proving this to Spamhaus turned out to be a very difficult task.
')
Subnets were in SBL for more than two months, they started blocking the subnets of our LIR. Spamhaus himself did not respond to our attempts to get in touch with them.
Here is what we decided to do:
1) All our clients have been sent a mailing list with a request to write a letter to Spamhaus that they do not deal with spam and are outraged by the fact that their IP addresses are entered into the SBL.
2) In the letter, depending on what service the client uses, he had to indicate his IP addresses: whether it is hosting — IP of the mail server, VPS / VDS, dedicated server or colocation — IP addresses issued to him as part of this service .
3) The most advanced and understanding clients were immediately informed that they sent letters to Spamhaus with the required content.
4) The rest unsubscribed to provide the text of the letter in English. We each compiled a separate unique text and sent in response to the letter.
5) They asked our LIR to write a letter to them too.
6) We personally asked our foreign clients and partners to write to Spamhaus. It should be noted that among them were quite large foreign companies, the recipients of our clients. They wrote that they have known us for a long time and are confident that we are not engaged in spamming.
I must say that we did not expect such a reaction. The day after the authorized stock, a letter came from a question from Spamhaus about whether we have customers who send spam. After our negative reply, the SBL was cleared from our subnets.
Do not abuse this method.
Source: https://habr.com/ru/post/144962/
All Articles