[Dvotee]

It must be intermittent or resolved. I've rcvd an email from a customer saying he can't send emails!!!!

Having said that I cant send :-(

[Kieran]

Its only the sending of e-mails that is a problem; you will be able to receive mail to your XILO account(s) fine.

Thanks for the info on that Gary, I have just checked SpamHaus in details and now see the same information. This may, in that case, take longer to resolve because SpamHaus require proof of the removal of the offending accounts before lifting the block. I've poked Matt about this again so hopefully we will have an update for you all soon.

As a temporary measure you should be able to send e-mails using your ISPs SMTP server. Not ideal, but it should get any urgent mails sent for you for the time being.

[gary64]

Thanks for the update Kieran!

[Dvotee]

Yes I know it's the sending, he's on a xilo server but assume within the range will be OK which is why I rcvd OK but neither of us can send externally...????

Typically he's a new customer, its a new business and he wants to acknowledge his first order that he's rcvd today...oh well

Thanks for the update anyways

[Kieran]

An update from Matt for you all

Originally Posted by Matt

SpamHaus have listed one of our IP blocks due a known spammer using our services. This is the first time we have been made aware of this and are trying to contact SpamHaus to get the issue resolved as soon as possible.

We would like to apologise about this but we were not informed prior to the block which did not allow us to remove the customer before hand.

[Matt]

Hi all,

We have all been working on this issue today.

SpamHaus did not inform us before placing the block - thus not allowing us time to remove the customer who we did not know was a spammer before this incident.

Upon emailing SpamHaus they informed us that they needed a reply from one of our transit suppliers. We said this should not be the case as the RIPE lookup for our range is us not the other company. They still refused to do anything until the other company contacted them. We are now awaiting a reply from SpamHaus to get this issue resolved.

Customer has been terminated for spam and a black list listing causing issues to other customers.

There is not much we can do in situations like this apart from wait for the third party to act upon our instructions.

Matt

[jnovak]

I just tried sending an email and I think it got through this time... can someone else confirm the same, or are they still blocking us?

[tg]

This is certainly unfortunate and always the problem with shared hosting, but the extent of the block seems rather drastic.

For those who don't dig (i.e. customers) could you update the status page
http://forum.xilo.net/service-status/
to reflect this issue? It would help as these pages are used by helpdesks and they can be lazy buggers.

It seems that .90 is the problem. Any chance of getting the block narrowed a bit?

At 19:40 Spamhaus still says:

Ref: SBL56248

193.238.80.0/25 is listed on the Spamhaus Block List (SBL)

04-Jul-2007 21:32 GMT | SR14


<TABLE cellSpacing=2 cellPadding=0 width=604 bgColor=#ffd700 border=0><TBODY><TR><TD><TABLE cellSpacing=0 cellPadding=5 width=600 border=0><TBODY><TR><TD bgColor=#ffd700><TABLE cellSpacing=0 cellPadding=0 width=590 border=0><TBODY><TR><TD width=104></TD><TD width=486>Wayne Mansfield</TD></TR></TBODY></TABLE></TD></TR><TR><TD bgColor=#e3e3e3>193.238.80.0/25 is listed on the Register Of Known Spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by Wayne Mansfield.
</TD></TR><TR><TD bgColor=#f3f3f3>Spam Hosting and DNS: w#w#w.britain-in-business.c#o#m
</TD></TR><TR><TD bgColor=#f3f3f3>w#w#w.britain-in-business.c#o#m 14400 IN CNAME britain-in-business.com
britain-in-business.com 14400 IN A 193.238.80.90
britain-in-business.com 86400 IN NS ns5.xilo.net
britain-in-business.com 86400 IN NS ns6.xilo.net
britain-in-business.com 86400 IN NS ns4.xilo.net
ns4.xilo.net 172800 IN A 193.238.80.31
ns5.xilo.net 172800 IN A 72.21.47.31
ns6.xilo.net 172800 IN A 193.227.247.31

britainevents.co.uk 3600 IN A 89.238.136.146
britainevents.co.uk 669 IN MX 10 mail.britainevents.co.uk
mail.britainevents.co.uk 669 IN A 89.238.136.146
britainevents.co.uk 172800 IN NS ns2.dnszones.net
britainevents.co.uk 172800 IN NS ns0.dnszones.net
britaininbusinessevents.co.uk 3600 IN A 89.238.136.147
britaininbusinessevents.co.uk 3600 IN MX 10 mail.britaininbusinessevents.co.uk
mail.britaininbusinessevents.co.uk 3600 IN A 89.238.136.147
britaininbusinessevents.co.uk 157504 IN NS ns0.dnszones.net
britaininbusinessevents.co.uk 157504 IN NS ns2.dnszones.net
ns0.dnszones.net 123541 IN A 213.230.203.88
ns2.dnszones.net 123541 IN A 194.79.28.2
</TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>

[preiffer]

It's not just .90 - we're getting blocked from .55 too.

[Matt]

Hi,

The block is for 193.238.80.0/25 which means IP addresses from 193.238.80.0 - 193.238.80.127

For now - I have redirect all outbound mail from any server in that range via an external mail gateway on a different network (72.21.47.0/24).

All mail is leaving the network without problems now and will continue to do so regardless of the blocked status by SpamHaus.

I would like to add that we have received no reply from SpamHaus since our last mails. I have been mailing them near 2-hourly.

Matt