BDHFQG6NN5KD

There are a lot of forms for reporting various types of webspam to Google now. Hopefully these tools will help to reduce the amount of webspam out there, and with Google’s excellent track record, we should see some good results.

We’ll assume that any reports that are made receive human review before blacklisting/filtering, so that false reports (e.g. competitive harassment) are quickly culled. If your company experiences unjustified filtering (as judged by industry-sanctioned practices) by any of the new web filtering tools in practice today, however, we’d like to know about it. We, like most of you, would like to see spam filtering perfected to the point that true spam is filtered but legitimate email and web traffic is not filtered.

The reason we ask this is that the FIVETENFREE email blacklist has been known to produce a relatively high percentage of false positives.

For example, my personal IP, given to my computer dynamically, is on their blacklist.

Here’s what their site says when I run the test on my current personal computer IP:

“misc.spam. If you are not running a mail server on (X), this listing should not affect you in any way, and you should ignore whatever source told you that this might be a problem.

The misc.spam group is mostly (but not entirely) composed of entire addresses blocks that have a) sent spam here, b) have consecutive or missing reverse dns, and c) have no customer sub-delegation via either the controlling RIR (ARIN, RIPE, LACNIC, APNIC, etc) or an rwhois server referenced in the main RIR records.”

So, the problem ends up being my IP address reverse-DNS doesn’t correspond to my domain name, and they also don’t like the TTL for my A record. Of course, none of this is under my control, it is controlled by my ISP.

So, as they suggest on their own site, I should ignore this.

We suggest you do the same unless it is causing email problems. To go to their site directly to test your own IP, and find out why it’s listed, go to: http://www.five-ten-sg.com/mapper

Search engines and browsers, led by Google and Firefox, now regularly blacklist thousands of legitimate websites each day that get infected with malware. Sites that get blacklisted lose most of their traffic from Google and Firefox and incur significant revenue and brand losses.

As a result, it’s a good idea to check your site on a regular basis for browser blacklisting, in addition to email blacklisting. We’ve spent the last year testing one such solution, that offers a free component as well as a premium testing service. (ALL of our recommended solutions go through extensive testing before making it to our recommended list.)

Together with Dasient (a company started by ex-Googlers), we are offering a service to help our customers stay off browser blacklists. This new premium security service will monitor your web site and alert you if your site is ever infected with malware that could cause your site to get blacklisted. Check out our premium malware monitoring solution.

Please feel free to let us know if you have any questions or feedback, and we look forward to helping support and enable your web properties and businesses!

Thanks!

Rob
Global eBusiness Solutions

The JAMMDNSBL has been removed from our lookup tool.

RedHawk has indicated that they are going to release access to their access.redhawk.org blacklist with their “soon to be released” SpamHawk product. They indicate that they are again collecting information from their SPAM database, as of November 2008.

For more information, please see their SpamHawk page at:

Visit redhawk.org

—————————————————————————-
Posted: Thu Aug 21, 2008 1:00 pm

Received an email today noting that the link to Redhawk didn’t work anymore. So we did a bit of investigating, and found something is indeed up with the site. Redhawk.org appears to have a lot of broken links right now, including the http://access.redhawk.org/ link, which we believe is supposed to be their main link.

You can see the main page for their spam tool at:

http://www.redhawk.org/index.php/component/option,com_wrapper/Itemid,43/

But the hidden feedback link referred to appears to be buried at:

http://www.redhawk.org/index.php/content/view/41/9/

But if you click on it, it also fails!

So, we performed a domain lookup (WHOIS) to find the registrant contact info. for the domain as the only remaining way we know of contacting the site’s owner.

Hopefully, the site issues will be resolved shortly.

Rob

If your email server is still using blackholes.intersil.net, you should remove it from your configuration.

For users of our Email Blacklist Lookup Tool, we’ve taken care of the registration process for you. You just need to enter your Email server’s IP address in our tool to see if it is in the BRBL database.

Please let us know if you have any related problems or questions.

-Rob