----- Original Message ----- From: "Bill Landry" billl@pointshare.com To: "'SURBL Discussion list'" discuss@lists.surbl.org Sent: Tuesday, August 24, 2004 9:05 PM Subject: Re: [SURBL-Discuss] FP in WS & DS?
----- Original Message ----- From: "Chris Santerre" csanterre@merchantsoverseas.com
This is from a US Bank newsletter, and I have confirmed via whois that US Bank does own the domain in question:
usbank-email.MUNGEDcom
The sending IP address is not listed in any RBL/RHSBLs:
http://www.dnsstuff.com/tools/ip4r.ch?ip=192.168.40.122
Looks like a legitimate, subscription based, US Bank newsletter.
We aren't seeing eye to eye today bill :)
207.189.106.22 not the reserved IP you listed.
Yep, I corrected that in my last e-mail.
I see it as 4at1.com who is also:
00123.com 1nc002.com 1nc012.com 1nc022.com 4at1.com 4at2.com 4at2.net 4at5.net
#Once ONCE (NET-207-189-106-0-1) 207.189.106.0 - 207.189.106.255 Empire Communications FORTIX-NET (NET-207-189-96-0-1) 207.189.96.0 - 207.189.127.255
Why would it matter who assigned US Bank the address space, or who else
they
assigned address space to? The IP address US Bank is using in not listed
in
any RBL/RHSBLs, and the bottom line is that the newsletter, and the
company
distributing it, are quite obviously both legitimate. What else
matters...?
Bill,
Not every spammer HAS to be in a RBL... every mail a spammer sends is legitimate. (except for Chris_looking_for_car_keys )
May I suggest you use http://openrbl.org for your lookups.
eg: http://openrbl.org/ip/207/189/106/22.htm
world looks a different colour there...
I got about 400 of those US bank legitimate messages all directed to german speaking users, among them 200 pupils of a hearing impaired school. Wanna tell ME they subscribed to that #@*/$àöç
my 2 cents
Alex