[Linux-aus] Announcing Everything Open - Conference 2023

Robert Mibus mibus at mibus.org
Sat Oct 15 15:39:31 AEDT 2022


On the topic of mail blocking... it says via bl.zonecheck.org, so you can check:

$ host 2607:f8b0:4864:20::229
9.2.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.ip6.arpa
domain name pointer mail-oi1-x229.google.com.

(DNS the other way matches, FTR, so this PTR record is accurate)

$ host 9.2.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.zonecheck.org
9.2.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.bl.zonecheck.org
has address 127.0.0.10

127.0.0.10 is indeed the "spamtrap" address at
https://dnsbl.zonecheck.org/#traps

> spamtrap.bl.zonecheck.org - Our spamtrap honeypot. This will list IP's who send to our
> honeypot trap addresses, these are special addresses that have never been, nor ever will
> be, used anywhere, they are discreet hidden addresses designed to "trap" address
> harvesters.
> Usage of this list is considered to be safe, very low risk
> Listing Duration: long.
> Code: 127.0.0.10

Poking around other values near the address, I'd say the /64 is on the
blocklist.

Blocking outbound IPs fromused by Gmail is not likely a good SNR for a
filter; hopefully Noel sees this via the list and can remove the
relevant entry/entries.
-- 
Robert Mibus <mibus at mibus.org>


More information about the linux-aus mailing list