I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages

Messages Mail rejection reason
172 Rejected RCPT: relay not permitted
41 Connection refused: too many connections
10 Rejected RCPT: Sender verify failed
9 Dropped: too many unrecognized commands
2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at sbl-xbl.spamhaus.org
2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at sbl-xbl.spamhaus.org
1 Dropped: too many syntax or protocol errors
1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at sbl-xbl.spamhaus.org

Very good work Spamhaus!

--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b
Phonies choke the life out of life itself. -unknown Beware https://mindspring.com

On Tue, 28 Mar 2023 14:54:53 -0000 (UTC), The Doctor wrote:
>
> I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages
>
>
> Messages Mail rejection reason
> 172 Rejected RCPT: relay not permitted
> 41 Connection refused: too many connections
> 10 Rejected RCPT: Sender verify failed
> 9 Dropped: too many unrecognized commands
> 2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at sbl-xbl.spamhaus.org
> 2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at sbl-xbl.spamhaus.org
> 1 Dropped: too many syntax or protocol errors
> 1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at sbl-xbl.spamhaus.org
>
>
> Very good work Spamhaus!

Amazing they dare. It's Google!

Also: What took them so long then?
--
Andreas

On 28/03/2023 15:54, The Doctor wrote:
> I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages
>
> Very good work Spamhaus!
>
I'M VERY DISAPPOINTED. MY 1 MILLION ADS THAT WERE SUPPOSED TO GO OUT
EARLIER TODAY HAVE BEEN BLOCKED. HOW AM I GOING TO MAKE A LIVING WITHOUT
SENDING OUT EMAILS ON BEHALF OF MY CLIENTS? DON'T THEY HAVE COMMON SENSE
TO THINK ABOUT PEOPLE'S LIVELIHOOD?

WE HAVE FAMILIES TO FEED AND SO WE SEND OUT ABOUT 1 MILLION EMAILS A DAY
USING GOOGLE, AMAZON, OUTLOOK, AOL, ZOHO, AND YAHOO. I WAS USING
MAILCHIMP/MANDRILL BUT THEIR PRICES HAVE SKY ROCKETED AND MY BUSINESS
MODEL CAN'T MANAGE IT. AMAZON/AWS IS THE CHEAPEST BECAUSE IT COSTS ME
ONLY $10 PER 100,000 EMAILS BUT IT IS VERY FAST SO WORTH IT.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday, 28 March 2023 14:54 -0000,
in article <tvuv3t$1veo$61@gallifrey.nk.ca>,
Dave "The Doctor" Yadallee <doctor@doctor.nl2k.ab.ca> wrote:

> I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages

> Messages Mail rejection reason
> 172 Rejected RCPT: relay not permitted
> 41 Connection refused: too many connections
> 10 Rejected RCPT: Sender verify failed
> 9 Dropped: too many unrecognized commands
> 2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at sbl-xbl.spamhaus.org
> 2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at sbl-xbl.spamhaus.org
> 1 Dropped: too many syntax or protocol errors
> 1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at sbl-xbl.spamhaus.org

> Very good work Spamhaus!

So, Dave, how are you checking these IP addresses against the Spamhaus
DNSbls? I ask, as none of your examples appear in DNS responses to
queries of the Spamhaus SBL, XBL or PBL zones, individually or in
combination, as the Spamhaus ZEN zone.

$ host 209.85.214.177
177.214.85.209.in-addr.arpa domain name pointer mail-pl1-f177.google.com.
$ host 177.214.85.209.zen.spamhaus.org
Host 177.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.216.50
50.216.85.209.in-addr.arpa domain name pointer mail-pj1-f50.google.com.
$ host 209.85.216.50.zen.spamhaus.org
Host 209.85.216.50.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.210.180
180.210.85.209.in-addr.arpa domain name pointer mail-pf1-f180.google.com.
$ host 180.210.85.209.zen.spamhaus.org
Host 180.210.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.214.169
169.214.85.209.in-addr.arpa domain name pointer mail-pl1-f169.google.com.
$ host 169.214.85.209.zen.spamhaus.org
Host 169.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.214.170
170.214.85.209.in-addr.arpa domain name pointer mail-pl1-f170.google.com.
$ host 170.214.85.209.zen.spamhaus.org
Host 170.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.214.171
171.214.85.209.in-addr.arpa domain name pointer mail-pl1-f171.google.com.
$ host 209.85.214.171.zen.spamhaus.org
209.85.214.171.zen.spamhaus.org has address 127.0.0.11
$ host 209.85.214.179
179.214.85.209.in-addr.arpa domain name pointer mail-pl1-f179.google.com.
$ host 179.214.85.209.zen.spamhaus.org
Host 179.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.215.180
180.215.85.209.in-addr.arpa domain name pointer mail-pg1-f180.google.com.
$ host 180.215.85.209.zen.spamhaus.org
Host 180.215.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.216.42
42.216.85.209.in-addr.arpa domain name pointer mail-pj1-f42.google.com.
$ host 42.216.85.209.zen.spamhaus.org
Host 42.216.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.216.43
43.216.85.209.in-addr.arpa domain name pointer mail-pj1-f43.google.com.
$ host 43.216.85.209.zen.spamhaus.org
Host 43.216.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)
$ host 209.85.216.44
44.216.85.209.in-addr.arpa domain name pointer mail-pj1-f44.google.com.
$ host 44.216.85.209.zen.spamhaus.org
Host 44.216.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

You are welcome to continue discarding what may or may not be
legitimate email, as is your wont, but you should not try to place the
blame for your own incompetence on what may be a misuse of Spamhaus
resources. Please check your configuration.

https://www.spamhaus.org/organization/dnsblusage/

- --
David Ritz <dritz@mindspring.com>
"I can stand brute force, but brute reason is quite unbearable.
There is something unfair about its use. It is hitting below the
intellect." - Oscar Wilde (1854-1900)

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQSc0FU3XAVGYDjSGUhSvCmZGhLe6wUCZCO1GAAKCRBSvCmZGhLe
6zBsAJ9/jXmHHW9XuC4LQkvJBoIpeUNmtACdEPMLefVAIs6AettJ1XYG1y67TWs=
=KijJ
-----END PGP SIGNATURE-----

In article <87o7oc8okb.fsf@usenet.ankman.de>,
Andreas Kohlbach <ank@spamfence.net> wrote:
>On Tue, 28 Mar 2023 14:54:53 -0000 (UTC), The Doctor wrote:
>>
>> I found this in https://ns2.nk.ca/eximstats-2023-03-27.html#Relayed%20messages
>>
>>
>> Messages Mail rejection reason
>> 172 Rejected RCPT: relay not permitted
>> 41 Connection refused: too many connections
>> 10 Rejected RCPT: Sender verify failed
>> 9 Dropped: too many unrecognized commands
>> 2 Rejected RCPT: rejected because 209.85.214.177 is in a black list at
>sbl-xbl.spamhaus.org
>> 2 Rejected RCPT: rejected because 209.85.216.50 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Dropped: too many syntax or protocol errors
>> 1 Rejected RCPT: rejected because 209.85.210.180 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.214.169 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.214.170 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.214.171 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.214.179 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.215.180 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.216.42 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.216.43 is in a black list at
>sbl-xbl.spamhaus.org
>> 1 Rejected RCPT: rejected because 209.85.216.44 is in a black list at
>sbl-xbl.spamhaus.org
>>
>>
>> Very good work Spamhaus!
>
>Amazing they dare. It's Google!
>
>Also: What took them so long then?
>--
>Andreas

I noticed a second batch today.
--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b
Share, or all will be taken. -unknown Beware https://mindspring.com

David Ritz <dritz@mindspring.com> writes:

> So, Dave, how are you checking these IP addresses against the Spamhaus
> DNSbls? I ask, as none of your examples appear in DNS responses to
> queries of the Spamhaus SBL, XBL or PBL zones, individually or in
> combination, as the Spamhaus ZEN zone.
>
> $ host 209.85.214.177
> 177.214.85.209.in-addr.arpa domain name pointer mail-pl1-f177.google.com.
> $ host 177.214.85.209.zen.spamhaus.org
> Host 177.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

Listed, but "informational ONLY" "an alert to the owner of the network"

https://check.spamhaus.org/listed/?searchterm=209.85.214.177

! 209.85.214.177 has 1 listing

! This IP address has been observed to be involved in at least one of the
! following activities; sending spam, snowshoe spamming,hijacked IP space,
! or associated with bulletproof hosting.

! As a result, this IP address is listed in the Spamhaus Blocklist (SBL)

! 209.85.214.177 appears in the following listings:

! https://www.spamhaus.org/sbl/query/SBL611813

! https://www.spamhaus.org/sbl/query/SBL604995

and for both those links:

! 209.85.214.176/31 is listed on the Spamhaus Block List - SBL
! This SBL record is informational ONLY. The listing is not active, and
! will not result in any email being blocked. We are publishing this as an
! alert to the owner of the network.

Google has its own page.

https://www.spamhaus.org/sbl/listings/google.com

! Found 1367 SBL listings for IPs under the responsibility of google.com

--
Alan J. Wylie https://www.wylie.me.uk/

Dance like no-one's watching. / Encrypt like everyone is.
Security is inversely proportional to convenience

And for today's update

Source

https://ns2.nk.ca/eximstats-2023-03-28.html#Mail%20rejection%20reason%20count

2 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.172 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.174 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.176 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.182 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.215.173 is in a black list at sbl-xbl.spamhaus.org
--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b
Share, or all will be taken. -unknown Beware https://mindspring.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday, 29 March 2023 09:24 +0100,
in article <87r0t8oti6.fsf@wylie.me.uk>,
Alan J. Wylie <alan@wylie.me.uk> wrote:

> David Ritz <dritz@mindspring.com> writes:

>> So, Dave, how are you checking these IP addresses against the
>> Spamhaus DNSbls? I ask, as none of your examples appear in DNS
>> responses to queries of the Spamhaus SBL, XBL or PBL zones,
>> individually or in combination, as the Spamhaus ZEN zone.

>> $ host 209.85.214.177
>> 177.214.85.209.in-addr.arpa domain name pointer mail-pl1-f177.google.com.
>> $ host 177.214.85.209.zen.spamhaus.org
>> Host 177.214.85.209.zen.spamhaus.org not found: 3(NXDOMAIN)

> Listed, but "informational ONLY" "an alert to the owner of the network"

> https://check.spamhaus.org/listed/?searchterm=209.85.214.177

Yes, of course it is. However, 209.85.214.177 is not included in the
Spamhaus subscription data feed, nor in their mirrored DNS database.
As this is an informational listing, Spamhaus believes that the record
is not suitable for the purpose of blocking email; ie. blocking the
Google outbound servers is a fool's errand. While it may catch the
occassional UBE, it will also block many times more ham.

> ! 209.85.214.177 has 1 listing

> ! This IP address has been observed to be involved in at least one of the
> ! following activities; sending spam, snowshoe spamming,hijacked IP space,
> ! or associated with bulletproof hosting.

> ! As a result, this IP address is listed in the Spamhaus Blocklist (SBL)

> ! 209.85.214.177 appears in the following listings:

> ! https://www.spamhaus.org/sbl/query/SBL611813

> ! https://www.spamhaus.org/sbl/query/SBL604995

> and for both those links:

> ! 209.85.214.176/31 is listed on the Spamhaus Block List - SBL
> ! This SBL record is informational ONLY. The listing is not active, and
> ! will not result in any email being blocked. We are publishing this as an
> ! alert to the owner of the network.

However, it appears that mail is being blocked at NetKnow/Netline2000,
against the stated Spamhaus policy. It is this off-policy usage,
which I am attempting to understand and address.

> Google has its own page.

> https://www.spamhaus.org/sbl/listings/google.com

https://www.spamhaus.org/statistics/networks/
https://www.spamhaus.org/sbl/listings/wylie.me.uk

> ! Found 1367 SBL listings for IPs under the responsibility of google.com

As already noted, the listings for the Gmail outbound servers are
advisory. The bulk of these SBL records pertain to activity on their
cloud hosting ranges, ie. SBL618075 34.29.141.218/32.

$ host 34.29.141.218
218.141.29.34.in-addr.arpa domain name pointer 218.141.29.34.bc.googleusercontent.com.

$ host -t TXT 218.141.29.34.zen.spamhaus.org
218.141.29.34.zen.spamhaus.org descriptive text "https://www.spamhaus.org/query/ip/34.29.141.218"
218.141.29.34.zen.spamhaus.org descriptive text "https://www.spamhaus.org/sbl/query/SBL618075

Please note, I am not in any way defending Google; Google blows
chunks. I am only stating that blocking mail from the outbound Gmail
servers, based on advisory information, is an error which is bound to
produce false positives.

I am asking the source of the lookups, whether they are from queries
made directly to the Spamhaus DNSbl mirrors, which they appear not to
be, or from some third party source.

Again, if Dave wants to deny all email originating from Google
net-space, he is more than welcome to do so. The question remains, as
to the source of informational listings which appear in Dave's Exim
logs.

- --
David Ritz <dritz@mindspring.com>
"We have met the enemy and he is us."
-- Walt Kelly (1913-1973), in the voice of Pogo

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQSc0FU3XAVGYDjSGUhSvCmZGhLe6wUCZCTiFAAKCRBSvCmZGhLe
6zdXAJ9sS7lxUxaZ+Vyn/WJdgGVVNZyIOACfaMiQA0KpmbXM4B9E6+BXxMmFEAs=
=F4D5
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday, 29 March 2023 15:15 -0000,
in article <u01kn4$8bk$11@gallifrey.nk.ca>,
The Doctor <doctor@doctor.nl2k.ab.ca> wrote:

> And for today's update

> Source

> https://ns2.nk.ca/eximstats-2023-03-28.html#Mail%20rejection%20reason%20count

Yes, Dave, we know what you are copying and pasting comes from the
logs of the Exim instance running on your server. The question is,
from were is Exim getting the data, upon which you are basing your
rejections? I must ask, as the Google IP addresses you list are not
to be blocked, based on Spamhaus policy.

> 2 Rejected RCPT: rejected because 209.85.216.43 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.172 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.174 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.176 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.214.182 is in a black list at sbl-xbl.spamhaus.org
> 1 Rejected RCPT: rejected because 209.85.215.173 is in a black list at sbl-xbl.spamhaus.org

Dave, what is the source of the Spamhaus data, which Exim is using,
as it appears to be erroneous?

- --
David Ritz <dritz@mindspring.com>
"My life has been one long descent into respectability."
- Mandy Rice-Davies (1944-2014)

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQSc0FU3XAVGYDjSGUhSvCmZGhLe6wUCZCToSwAKCRBSvCmZGhLe
671+AKCCORk7i5adWvs6xHjYPBciD67PnwCglptIha6CzVjQokqxq9mZoHzkq2g=
=dUaK
-----END PGP SIGNATURE-----

MOre updates!

https://ns2.nk.ca/eximstats-2023-03-29.html#Mail%20rejection%20reason%20count

1 Rejected RCPT: rejected because 209.85.214.180 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.214.182 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.45 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.51 is in a black list at sbl-xbl.spamhaus.org
1 Rejected RCPT: rejected because 209.85.216.53 is in a black list at sbl-xbl.spamhaus.org
--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b
Share, or all will be taken. -unknown Beware https://mindspring.com