[LINK] [Fwd: [Oz-ISP] Telstra blocking port 25...]

[Howard Lowndes]

On Mon, 2004-04-05 at 10:44, Craig Sanders wrote:
> On Mon, Apr 05, 2004 at 09:42:47AM +1000, Howard Lowndes wrote:
> > On Mon, 2004-04-05 at 08:05, Craig Sanders wrote:
> > > On Mon, Apr 05, 2004 at 05:52:16AM +1000, Howard Lowndes wrote:
> > > > If anyone is on BigPong with dynamic IP and uses their own mail servers,
> > > > then this affects you...and they give you 8 days notice, 4 of which are a
> > > > long weekend.
> > > 
> > > hooray!  finally, telstra do something about the spam (and viruses)
> > > originating or relayed via compromised/virus-infected hosts on their
> > > network.
> > > 
> > > people with dynamic IP addresses should use their ISP's mail server to
> > > relay their outbound mail.
> > 
> > I have a number of clients on dynamic IPs with BigStink _and_ they run their
> > own mail servers, so they are affected, 
> 
> then they're probably breaking the terms of their contract with Bigpond.  IIRC,
> only business accounts with static IP addresses are permitted to run servers on
> bigpond accounts.  residential accounts are specifically prohibited from
> running servers of any kind.

Not unless they have changed the T&C recently.

> 
> 
> just as importanly, dynamic IP addresses should relay their outbound mail via
> their ISP's mail server (or via some other static-IP mail server which they
> have authorised access to, whether via SMTP-AUTH, encrypted tunnel, uucp over
> tcp or whatever) - that way someone is accountable for any spam that originates
> or is relayed via that dynamic IP - and the relay server can implement
> anti-spam rules to prevent spammers from spewing their garbage.

They do relay it via their own mail servers, but with BP circuits in
between.  Client's workstation at site A on dyn BP sends port 25 traffic
to client's mail server at site B which then forwards on to receiver. 
This first link is legitimate, but will be blocked.

> 
> 
> > so that gives me 4 days to get over most of Vic and NSW to fix them, or churn
> > them off BigPong, which is what will be happening as fast as I can get their
> > OK.
> 
> big deal - at the very most that should take 5 minutes each with ssh.

Not if I have to churn them off BP.  In that case I need to go on site.

> 
> or perhaps you installed Windows mail servers?  in which case, they're
> vulnerable to whatever spammer virus comes along and should not have access to
> port 25.  i.e. by setting up windows mail servers, you have contributed to the
> spam & virus problem which has resulted in bigpond blocking port 25.

Wash your mouth out.  Linux only.

> 
> craig
-- 
Howard.
LANNet Computing Associates - Your Linux people <http://www.lannetlinux.com>
------------------------------------------
Flatter government, not fatter government - Get rid of the Australian states.
------------------------------------------
To mess up a Linux box, you need to work at it;
to mess up your Windows box, you just need to work on it.
 - Scott Granneman, SecurityFocus