On 2026-10-10 10:20, Dianne Skoll via linux wrote:
On Sat, 10 Oct 2026 00:21:19 -0400
peters-oclug [ at ] techwiz [ dot ] ca wrote:
My biggest issue is blacklists, my vms at OVH and digitalocean all have
an ip that most of the time is blacklisted with UCEPROTECTL3.
Do you have a static IP?
Of course, can't really have a mail server with dyndns (and I don't
think you can get a cloud vps with dynamic ip even if you wanted to)
I have also configured SPF, DKIM & DMARC
I find most reputable DNSBLs are willing to delist
I don't think UCEPROTECTL3 belongs to that group. while my ip isn't
spamming someone else in the /17 network is and what they say about that is
================
As you should know now: It is not you, it is your complete provider
which got UCEPROTECT-Level 3 listed.
Your IP 161.35.158.141 was NOT part of abusive action, but you are the
one that has freely chosen your provider.
By tolerating or ignoring that your provider doesn't care about abusers
you are indirectly also supporting the global spam with your money.
Seen from this point of view, you really shouldn't wonder about the
consequences.
Therefore we recommend:
Please send a complaint to your provider and request they fix this
problem immediatly.
Think about this: You pay them so that you can use the Internet without
problems;
If they are ignoring your complaint or claiming they can't do anything,
you should consider changing your provider.
There are currently about 105,000 providers worldwide, but only a few
hundred make it to get listed into UCEPROTECT-Level 3.
================
Did contact digital ocean but they just replied with something down the
lines of "it's to hard to prevent it"
Another option is to pay to get delisted.
By going to https://www.whitelisted.org/?ip=144.217.161.9 one can see
that for "only" 25 CHF/month ($43CAD) my specific ip ends up on a white
list and with that it should be ok as long as I don't start spamming my
self.
BTW Dianne, I see that skoll.ca MX is also listed on that list since
someone in the /16 segment is
FYI - the URL I look at is https://www.uceprotect.net/en/rblcheck.php
MSFT and Google both have reasonable Web sites for postmasters to request
delisting of their IPs.
The rejection I got was only from microsoft, sympatico and apple, gmail
never complained (after I fixed DMARC).
What can one do to stay off this blacklists that find one bad ip and
then blacklist the whole segment (or maybe even the AS)?
Those DNSBLs are highly irresponsible. You just have to patiently educate
people who use them about their irresponsibility.
Don't think I will have much luck with microsoft or apple> It's an
uphill battle,
Definitely yes.
I have started to look for hosting providers that block 25 by default
but open it on request (and confirmation wit SPF or something). I think
that's the better option when it comes to managing spam like this since
then the provider can close port 25 when they spamming and with it
closed by default it's less risk that the hole /16 segment is blocked.
/Kelly
To unsubscribe send a blank message to linux+unsubscribe [ at ] linux-ottawa [ dot ] org
To get help send a blank message to linux+help [ at ] linux-ottawa [ dot ] org
To visit the archives: https://lists.linux-ottawa.org