On Wed, August 26, 2015 2:29 pm, Alice Wonder wrote:
>
>
> On 08/26/2015 12:11 PM, g wrote:
>> On 08/26/15 13:11, Valeri Galtsev wrote:
>>> On Wed, August 26, 2015 12:55 pm, James A. Peltier wrote:
>> <<>>
>> something no one seems to have mentioned, so i will..
>>>> | >> Received: from mx2.loverhearts.com (mx2.loverhearts.com
>> loverhearts.com is a single page that seems to do nothing. and there is
nothing in page source to do anything.
>> validator.w3.org shows 1 error and 1 warning showing that page was
poorly written.
>> so the only harm is spam, which i now have going to my Junk folder. so,
to all of you, i pass along a much more loving 'love' link;
>> http://lovehearts.com
>> enjoy.
>
> If you look at the SPF record for loverhearts.com (where they are coming
from for me) there are a whole slew of servers permitted to send on
their behalf.
This way you may block good people. SPF records you used are owned by bad
guys: loverhearts.com allows others resend e-mail for themselves, but they
do not need permissions of whomever they add to their SPF records to do
so. In other words, one shouldn't trust anything what is in the records
created by bad guys.
I did nasty thing myself, but what I did at least IMHO is more or less
justified. As I received bad e-mail after Fabian contacted IP block owner
(digitalocean.com; 45.55.0.0/16), then I concluded IP block owner didn't
act promptly on abuse complaint, so I blocked e-mail from this whole block
owned by digitalocean.com IPs. This way their other clients will start
asking their provider questions why their e-mail is being blocked (by
some...)
Just my $0.02
Valeri
>
> So I took all those IP addresses specified and added them to my
> blacklist, it appears spammers are learning that SPF records can be a
path to filter avoidance.
>
> Maybe I'll start blocking any server with an SPF record that includes
more than 5 IP addresses, or servers where any host in the SPF record is
in a DNS blacklist.
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>
++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
