Mailing List Archive

Does anyone known the braindead anti-spam software "MagicSpam" ?
I got the following reject this morning:

<booking@example.com>: host mail.example.com[1.2.3.4] said: 550 Dynamic
Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam 1.0.4-9.1
(http://www.magicspam.com/).


Do a reverse look up of 212.25.14.40, and you'll see that it's perfectly
alright.


/Per Jessen, Zürich
Re: Does anyone known the braindead anti-spam software "MagicSpam" ? [ In reply to ]
On 10.11.10 08:23, Per Jessen wrote:
> I got the following reject this morning:
>
> <booking@example.com>: host mail.example.com[1.2.3.4] said: 550 Dynamic
> Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam 1.0.4-9.1
> (http://www.magicspam.com/).

40.14.25.212.in-addr.arpa. 3600 IN CNAME
40.32-63.14.25.212.in-addr.arpa.

well, the 40.32-63.14.25.212.in-addr.arpa is surely dynamic-looking ;-)

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
42.7 percent of all statistics are made up on the spot.
Re: Does anyone known the braindead anti-spam software "MagicSpam" ? [ In reply to ]
Matus UHLAR - fantomas wrote:

> On 10.11.10 08:23, Per Jessen wrote:
>> I got the following reject this morning:
>>
>> <booking@example.com>: host mail.example.com[1.2.3.4] said: 550
>> Dynamic
>> Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam
>> 1.0.4-9.1 (http://www.magicspam.com/).
>
> 40.14.25.212.in-addr.arpa. 3600 IN CNAME
> 40.32-63.14.25.212.in-addr.arpa.
>
> well, the 40.32-63.14.25.212.in-addr.arpa is surely dynamic-looking
> ;-)
>

I know :-)


/Per Jessen, Zürich
Re: Does anyone known the braindead anti-spam software "MagicSpam" ? [ In reply to ]
On 11/10/10 2:45 AM, Matus UHLAR - fantomas wrote:
> On 10.11.10 08:23, Per Jessen wrote:
>> I got the following reject this morning:
>>
>> <booking@example.com>: host mail.example.com[1.2.3.4] said: 550 Dynamic
>> Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam 1.0.4-9.1
>> (http://www.magicspam.com/).
> 40.14.25.212.in-addr.arpa. 3600 IN CNAME
> 40.32-63.14.25.212.in-addr.arpa.
>
> well, the 40.32-63.14.25.212.in-addr.arpa is surely dynamic-looking ;-)
>
as expected for classless DNS CIDR subdelegation, and valid according to
rfrc's. magicspam didn't resolve the cname (either of them I suspect).
not sure if I would use a cnam for quarantine.spamcheck.net. .. just
put a second record in the zone file.

host -t ptr 212.25.14.40
40.14.25.212.in-addr.arpa is an alias for 40.32-63.14.25.212.in-addr.arpa.
40.32-63.14.25.212.in-addr.arpa domain name pointer quarantine.spamchek.net.
# host -t a quarantine.spamchek.net
quarantine.spamchek.net is an alias for thorium.enidan.ch.
thorium.enidan.ch has address 212.25.14.40
# host -t a thorium.enidan.ch
thorium.enidan.ch has address 212.25.14.40



--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation

* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best in Email Security,2010: Network Products Guide
* King of Spam Filters, SC Magazine 2008

______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: Does anyone known the braindead anti-spam software "MagicSpam" ? [ In reply to ]
On 11/10/2010 6:32 AM, Michael Scheidell wrote:
> On 11/10/10 2:45 AM, Matus UHLAR - fantomas wrote:
>> On 10.11.10 08:23, Per Jessen wrote:
>>> I got the following reject this morning:
>>>
>>> <booking@example.com>: host mail.example.com[1.2.3.4] said: 550 Dynamic
>>> Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam
>>> 1.0.4-9.1
>>> (http://www.magicspam.com/).
>> 40.14.25.212.in-addr.arpa. 3600 IN CNAME
>> 40.32-63.14.25.212.in-addr.arpa.
>>
>> well, the 40.32-63.14.25.212.in-addr.arpa is surely dynamic-looking ;-)
>>
> as expected for classless DNS CIDR subdelegation, and valid according
> to rfrc's. magicspam didn't resolve the cname (either of them I
> suspect).
> not sure if I would use a cnam for quarantine.spamcheck.net. .. just
> put a second record in the zone file.

This looks like RDNS delegation to me, allowing a statically assigned
block of addresses from an ISP to control their own RDNS lookups.The
owner of the address block wouldn't be able to modify the upstream's
RDNS zone files so that's why the upstream has put in CNAME records, to
force the resolver to the owners zone file.

and if it is... most certainly not a dynamic ip.

-lee
>
> host -t ptr 212.25.14.40
> 40.14.25.212.in-addr.arpa is an alias for
> 40.32-63.14.25.212.in-addr.arpa.
> 40.32-63.14.25.212.in-addr.arpa domain name pointer
> quarantine.spamchek.net.
> # host -t a quarantine.spamchek.net
> quarantine.spamchek.net is an alias for thorium.enidan.ch.
> thorium.enidan.ch has address 212.25.14.40
> # host -t a thorium.enidan.ch
> thorium.enidan.ch has address 212.25.14.40
>
>
>
Re: Does anyone known the braindead anti-spam software "MagicSpam" ? [ In reply to ]
Lee Dilkie wrote:

>
> On 11/10/2010 6:32 AM, Michael Scheidell wrote:
>> On 11/10/10 2:45 AM, Matus UHLAR - fantomas wrote:
>>> On 10.11.10 08:23, Per Jessen wrote:
>>>> I got the following reject this morning:
>>>>
>>>> <booking@example.com>: host mail.example.com[1.2.3.4] said: 550
>>>> Dynamic
>>>> Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam
>>>> 1.0.4-9.1
>>>> (http://www.magicspam.com/).
>>> 40.14.25.212.in-addr.arpa. 3600 IN CNAME
>>> 40.32-63.14.25.212.in-addr.arpa.
>>>
>>> well, the 40.32-63.14.25.212.in-addr.arpa is surely dynamic-looking
>>> ;-)
>>>
>> as expected for classless DNS CIDR subdelegation, and valid according
>> to rfrc's. magicspam didn't resolve the cname (either of them I
>> suspect).
>> not sure if I would use a cnam for quarantine.spamcheck.net. .. just
>> put a second record in the zone file.
>
> This looks like RDNS delegation to me, allowing a statically assigned
> block of addresses from an ISP to control their own RDNS lookups.

Yep, that is precisely what it is.


/Per Jessen, Zürich
Re: Does anyone known the braindead anti-spam software "MagicSpam" ? [ In reply to ]
Per Jessen wrote:

> I got the following reject this morning:
>
> <booking@example.com>: host mail.example.com[1.2.3.4] said: 550
> Dynamic
> Style reverse DNS IP=[212.25.14.40].Rejected by MagicSpam
> 1.0.4-9.1 (http://www.magicspam.com/).
>
>
> Do a reverse look up of 212.25.14.40, and you'll see that it's
> perfectly alright.

FYI, I have just now reported this issue to magicspam.com, who within an
hour confirmed they had already started investigating the problem.


/Per Jessen, Zürich