My Mum flew in to visit last week, and over dinner one evening the talk turned to email. We don’t get much spam on Yahoo, mostly because we don’t give our email address out much. The only spam we really get is from <stockbroker website>, and that all goes to the spam folder. We use the site for checking stock quotes – it’s free, and we never see any of the spam they...
Yes, we have no IP addresses, we have no addresses today
We’ve just about run out of the Internet equivalent of a natural resource – IP addresses. ICANN allocated the last couple of blocks of general usage IPv4 addresses to APNIC earlier today. There are just five usable blocks of addresses left, and they’re reserved by IANA policy for the final phase of IPv4 exhaustion, one for each RIR. Like any other resource that’s been...
Why is shared hosting like phishing?
A client of a friend was getting rejection messages when they tried to send mail Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 554 554 5.7.1 The IP address of web site www.client.com [75.101.163.44] is listed at...
GFI/SORBS – should I use them?
Act 1 • Act 2 • Intermezzo • Act 3 • Act 4 • Act 5 Management Summary, Redistributable Documents and Links In the past week we’ve demonstrated that the SORBS reputation data is riddled with mistakes, poor practices, security holes and operational problems, and that the quality of the end result is really too poor to be useful. Today I’m looking at how this information should affect...
GFI/SORBS – I'm blacklisted, now what?
Act 1 • Act 2 • Intermezzo • Act 3 • Act 4 • Act 5 Management Summary, Redistributable Documents and Links In the past week we’ve demonstrated that the SORBS reputation data is riddled with mistakes, poor practices, security holes and operational problems, and that the quality of the end result is really too poor to be useful. What does this mean to you though? There are really two aspects:...
GFI/SORBS considered harmful, part 3
Act 1 • Act 2 • Intermezzo • Act 3 • Act 4 • Act 5 Management Summary, Redistributable Documents and Links In the last few days we’ve talked about GFI’s lack of responsiveness, the poor quality of their reputation and blacklist data, and the interesting details of their DDoS claims. Today we’re going to look at (some of) the fundamental problems with GFI’s procedures and...
GFI/SORBS – a DDoS Intermezzo
Act 1 • Act 2 • Intermezzo • Act 3 • Act 4 • Act 5 Management Summary, Redistributable Documents and Links I’ve been stage-managing for a production of The Nutcracker this week, so musical terminology is on my mind. In opera, the intermezzo is a comedic interlude between acts of an opera series. This comedic interlude is about the “DDoS” – a distributed denial of service...
GFI/SORBS considered harmful, part 2
Act 1 • Act 2 • Intermezzo • Act 3 • Act 4 • Act 5 Management Summary, Redistributable Documents and Links Yesterday I talked about GFI responsiveness to queries and delisting requests about SORBS listings. Today I’m going to look at data accuracy. The two issues are tightly intertwined – a blacklist that isn’t responsive to reports of false positive listings will end up with a...
GFI/SORBS considered harmful
Act 1 • Act 2 • Intermezzo • Act 3 • Act 4 • Act 5 Management Summary, Redistributable Documents and Links A little over a year ago the SORBS blacklist was purchased by GFI Software. I had fairly high hopes that it would improve significantly, start behaving with some level of professionalism and competence and become a useful data source, in much the same way that the SpamCop blacklist turned...
Clicktracking 2: Electric Boogaloo
A week or so back I talked about clicktracking links, and how to put them together to avoid abuse and blocking issues. Since then I’ve come across another issue with click tracking links that’s not terribly obvious, and that you’re not that likely to come across, but if you do get hit by it could be very painful – phishing and malware filters in web browsers. First, some...