Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2008-11-30 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Rejected Email Issues

Published: 2008-11-30
Last Updated: 2008-12-01 12:59:57 UTC
by Mari Nichols (Version: 2)
0 comment(s)

 

One of our readers, William, wrote in this morning to let us know he has been seeing a lot of REJECTED email traffic.  It appears to be the result of the reactivation of a defunct RBL that is denying all email traffic.

His suggestion for a quick fix of the problem is to remove the "dun.dnsrbl.net" entry from the list of RBL's used for Anti-Spam protection. He reported to us that he was seeing this as wide-spread starting at 01:15 Pacific, 30 November 2008 and was still continually getting reports from across the nation as of 07:55 Pacific, 30 November 2008.

Please contact us and let us know if you have been experiencing issues with this.

Mari Nichols     iMarSolutions

UPDATE:  Thanks to everyone for confirming this issue.  J.R. wrote in to confirm " This is probably because *.dnsrbl.net is now resolving to 127.0.0.1.  Removing this host fixed the issue."  Thanks again to everyone for writing in.

 

Keywords: email RBL
0 comment(s)
Diary Archives