My IP in DNS Blacklist

66.139.76.78 does not like recipient.
Remote host said: 554 The IP Address of the sender (67.15.158.173)
was found in a DNS blacklist database and was therefore refused.
Giving up on 66.139.76.78.

Both servers are mine -- one is rejecting email from the other.
But I can't seem to find any specific blacklist where it's listed.

~ Dar 

>> Both servers are mine -- one is rejecting email from the other.
>> But I can't seem to find any specific blacklist where it's listed.
>
> But you know which blacklists your server checks against?
>
> -- 
> Bjarke Andersen

Yes, and I've checked them all. It's not showing up in any of them. 

Dar wrote:
> 66.139.76.78 does not like recipient.
> Remote host said: 554 The IP Address of the sender (67.15.158.173)
> was found in a DNS blacklist database and was therefore refused.
> Giving up on 66.139.76.78.
>
> Both servers are mine -- one is rejecting email from the other.
> But I can't seem to find any specific blacklist where it's listed.

I'm not making sense of this server verbiage yet.

If 67.15.158.173 rDNS vps302.ourhelpdesk.net (67.help) is 'the sender',
what is 66.139.76.78 rDNS server1.darsbydesign.com -- the recipient?  If
66.dars is the recipient, what does 66.dars does not like recipient
mean?

The term 'giving up on' is generally used when that IP is the recipient.
So, two out of three 'statements' sound like 66.dars is the recipient
and 67.help is the sender and only one of three sounds 'stupid', namely
66.dars recipient does not like recipient.

While I'm not finding 66.dars or 67.help listed anywhere, I'm wondering
which of them is supposed to be an output server.

66.dars is the IP for the MX for darsbydesign.

The SPF for ourhelpdesk.net  sez:

v=spf1
ip4:67.15.160.190
ip4:67.15.158.164
ip4:67.15.158.166
ip4:67.15.158.169
  ?all

... which does not include .173, which is the one trying to transact.

So if the recipient 66.dars is configured to SPF, and .173 isn't in the
spf, then 66.dars might reject 67.help and say something stupidly about
why, since it doesn't seem to talk right.


-- 
Mike Easter
kibitzer, not SC admin

Mike Easter wrote:
> Dar wrote:
>> 66.139.76.78 does not like recipient.
>> Remote host said: 554 The IP Address of the sender (67.15.158.173)
>> was found in a DNS blacklist database and was therefore refused.
>> Giving up on 66.139.76.78.

66.dars recipient
67.help sender

> The SPF for ourhelpdesk.net  sez:
>
> v=spf1
> ip4:67.15.160.190
> ip4:67.15.158.164
> ip4:67.15.158.166
> ip4:67.15.158.169
>   ?all
>
> ... which does not include .173, which is the one trying to transact.

Going on a little more about ourhelpdesk at senderbase...

ourhelpdesk has the following output/ers

IP - name - rDNSvDNS - dailymag - monthlymag - RBL
67.15.144.4  vps314.ourhelpdesk.net Y 0.0 1.0 0
67.15.144.10  vps315.ourhelpdesk.net Y 1.7 1.3 0
67.15.144.12  vps313.ourhelpdesk.net Y 0.0 1.0 0
67.15.144.18  vps318.ourhelpdesk.net   0.0 2.1 0
67.15.144.26  vps321.ourhelpdesk.net   0.0 0.80 0
67.15.158.164  server1.ourhelpdesk.net Y 0.0 0.32 0
67.15.158.167  vps304.ourhelpdesk.net Y 2.0 3.0 0
67.15.158.173  vps302.ourhelpdesk.net Y 0.0 1.0 0
67.15.158.180  vps106.ourhelpdesk.net Y 2.9 3.0 0
67.15.216.151  vps311.ourhelpdesk.net Y 0.0 1.5 0
67.15.251.70  vps307.ourhelpdesk.net   0.0 0.32 0
67.15.251.73  vps303.ourhelpdesk.net Y 2.0 2.9 0

Above from senderbase, notice that there is very little correspondence
of the output servers with the listed SPF.  Here, the monthly magnitude
value indicates that all but two of the servers have a value between .8
and 3, or if you only want to consider those with over about 100 per
day, there are 4 of them, but they aren't the 4 listed in the SPF.  Only
one of the senderbase servers is also in the SPF, namely 67.15.158.164
which is called server1.ourhelpdesk.net -- you might also notice that
that server currently has almost zero magnitude daily or monthly
average.  The value 0.32 is about 2 items per day average over the last
month.



-- 
Mike Easter
kibitzer, not SC admin

> Dar wrote:
>> 66.139.76.78 does not like recipient.
>> Remote host said: 554 The IP Address of the sender (67.15.158.173)
>> was found in a DNS blacklist database and was therefore refused.
>> Giving up on 66.139.76.78.
>>
>> Both servers are mine -- one is rejecting email from the other.
>> But I can't seem to find any specific blacklist where it's listed.
>
> "Mike Easter" <MikeE@ster.invalid> wrote
> I'm not making sense of this server verbiage yet.

I simply copied and pasted the text from a bounce message.

66.139.76.78 was rejecting all email from 67.15.158.173

~ Dar