Slashdot Mirror


Long-Dead ORDB Begins Returning False Positives

Chapter80 writes "At noon today (Eastern Standard Time), the long dead ORDB spam identification system began returning false positives as a way to get sleeping users to remove the ORDB query from their spam filters. The net effect: all mail is blocked on servers still configured to use the ORDB service, which was taken out of commission in December of 2006. So if you're not getting any mail, check your spam filter configuration!"

11 of 265 comments (clear)

  1. Why not just close the server? by Em+Adespoton · · Score: 4, Insightful

    Why don't they just close the server so it no longer accepts connections? Are they doing this to stop the server currently at that location from being hammered with requests?

    1. Re:Why not just close the server? by ashridah · · Score: 4, Insightful

      While that's accurate to a point, Seems to me that doing this at the DNS level (deleting a DNS record, or pointing it to 127.0.0.1 and giving it a TTL of a few decades) would do the trick better than BLOCKING EMAIL.

      My bet is this is going to really REALLY negatively affect all of those mailservers that have been setup, for which there is *no* administrator. You know. the ones setup for smaller companies who have no inhouse admin, who hired a consultant, but wouldn't pay for ongoing maintenance (either due to tightness or actual lack of funds, etc). The response time here, and time to resolution is likely to be high to non-existent.

      All in all, this is a pathetic (understandable, mind you) move, and reeks of inconsideration.

  2. Re:Whoa! ORDB better have a good disclaimer by mrcaseyj · · Score: 4, Insightful

    It's one thing for a spam filter to make a mistake or even be careless and put a message into the spam folder, but quite another for a filter to intentionally cause known good messages to be absent from a users inbox. Why don't they just start reporting all messages as good, or just not give any rating to any message? This might be especially bad in situations where ORDB is only given partial weighting in the spam categorization process so that many messages still get through, thus making it less likely that the errors will be noticed quickly because there will not be a total block on email. To do what they're doing might be considered wreckless. I don't know much about the law in a situation like this but I'd be worried about liability even with a good disclaimer in the user agreement.

  3. Re:Nice by TubeSteak · · Score: 4, Insightful

    It's like hotlinking an image off someone's website after you've been told not to. Yes, the site owner is a dick for replacing the pic with goatse, but it's still your fault for linking to it in the first place.

    This will cause some confusion at first, but if it hit /. word will get out soon enough.
    I just hope no one's spam filter defaults to automatic-deletion.

    --
    [Fuck Beta]
    o0t!
  4. Re:Whoa! ORDB better have a good disclaimer by iangoldby · · Score: 4, Insightful

    When I had a run-in with my old ISP a few years ago, the issue was that a) they did not advertise anywhere that they weren't accepting mail from blacklisted peers, and b) mail from blacklisted peers was simply discarded. There was no 'administration interface' to '"release" the mail and/or mark it as safe.' There was in fact no way for the recipient (i.e. me) to ever know that a mail addressed to them that had not been delivered had even been sent.

    That said, the approach of ORDB does seem to be the right way to stop administrators from using it. If you don't force the issue by stopping all mail, then random non-spam emails will continue to be blocked indefinitely. Short-term pain for long-term gain...

  5. Re:Whoa! ORDB better have a good disclaimer by timmarhy · · Score: 4, Insightful

    the only person to blame is the careless mail admin who leaves ORDB in. ORDB is a free service, they have every right to take it down, hell i'm pretty amazed they left it up for a year and gave all the warnings they did.

    --
    If you mod me down, I will become more powerful than you can imagine....
  6. Re:Whoa! ORDB better have a good disclaimer by MrNaz · · Score: 5, Insightful

    As much as we can rail against stupid mail admins, I think it would not be remiss of us to remember that the ultimate sufferers are end users who probably have no idea what their mail server administrator is doing. In other words, this hurts the people who *rely* on mail administrators, not the mail administrators. For that reason, I think ORDB is doing the wrong thing. This is yet another reason why privately owned spam registrars like ORDB are a bad idea; they just do not understand the either the gravity of what they are doing, nor do they have the responsibility to take it seriously. If you are doing something on such a large scale, it is inevitable that there will always be stragglers. Don't get all indignant about how "dumb mail admins" should know better unless you know that all your utility providers abide by the latest best industry practices in their respective fields.

    On a side note, given that this move by ORDB specifically targets people other than those who they want to change the behaviour of in an attempt to get those innocent bystanders to affect change upon the real people they want to affect, this actually meets the FBI's definition of terrorism.

    --
    I hate printers.
  7. It's the only way to get them to stop by bl968 · · Score: 4, Insightful
    I closed my lists and two years later after checking my dns server and seeing traffic for a couple of dnsbl lists which had been empty for the last 2 years and finding that we were still getting several hundred requests per minute.

    Our blackhole lists are defunct. We announced their closure over 2 years ago and it was widely covered by the press at the time. We are still recording several hundred lookups per minute so Friday December 9th 2005 we started answering positive to all requests. If your mail is being blocked simply contact any isp blocking you using these lists and let them know they need to remove them ASAP! If they have questions they can contact me directly. [email removed]

    To identify whom to contact please reference the error message you receive.

    Look for something similar to:

    ----- Transcript of session follows -----
    ... while talking to mail.somedomain.com.:
    >>> MAIL From:<youremail@yourdomain.com>
    <<< 518 Your SMTP server is listed at something.domainremoved.net
    554 5.0.0 Service unavailable


    In this case you would contact somedomain.com you would tell them that the whatever.compu.net dnsbl is defunct and is now answering postiive on all lookups. As such they should remove it and any other compu.net dnsbl ASAP to prevent legitimate emails from being blocked.

    If they need verification send them to this web site.

    I announced this upcoming change to both the SPAM-L mailing list and the news.admin.net-abuse.email newsgroup

    "Over 2 years ago I shutdown blackhole.somedomain.net, pacbelldsl.somedomain.net, and pm0-no-more.somedomain.net then announced the shutdown on the news.admin.net-abuse.email and several other mail and abuse related lists. As of today I am still logging several hundred requests per minute to it two years later. In one week I am going to start answering positive on every lookup to those domains. I don't want to do this however I am not going to continue to bear the load for something that ceased to exist over two years ago. So basically check your mail servers and if you are using the blackhole.somedomain.net, pacbelldsl.somedomain.net or pm0-no-more.somedomain.net dnsbls remove it asap!

    Thanks."


    It was the only way to get them to stop and if I check my server today, I will likely find I am still getting some requests on them. So it's not dickish at all as another commentator claimed.
    --
    "GET / HTTP/1.0" 200 51230 "-" "Mozilla/4.0 (compatible; Setec Astronomy)"
  8. Re:Whoa! ORDB better have a good disclaimer by brassman · · Score: 4, Insightful
    What you're missing is that if ORDB flags all mail as "good," then clueless soi-disant 'admins' will continue to hammer the site with their useless queries, up to thousands of them per second. Blocking world+dog is a desperation move -- which has been used a few times in the past by other RBL administrators -- just to make people stop doing that.


    When someone just plain will not check back to see if your free service is still working (and free), how else do you get their attention?

    --
    "Ain't no right way to do a wrong thing."
  9. Mmmm, stereotypes by Anonymous Coward · · Score: 5, Insightful

    Saying "A girlfriend? Proof positive that he's not a regular /. reader" is modded Insightful? Since every mention of "girlfriend" receives this response like clockwork, Redundant seemed more appropriate... Well then, I have some more Insightful tidbits for you:


    Jocks are idiots.

    Linux users have tiny penises.

    Windows users are point-and-drool morons.

    Mac users are artistic and gay and think overpriced computers are status symbols.

    Business execs and politicians don't know fuck-all about computing or networking, but insist on controlling them anyway.

    Women are shitty drivers (they themselves have fewer accidents, hence they receive a better insurance rate; they're shitty drivers because they do annoying shit that creates obstacles for others, like not knowing what the fuck the passing lane is for).

    Black people are either from the ghetto, or act like they wish they were.

    White people have zero sense of rhythm, can't dance, and can't jump.


    Now where's my +5 Insightful?

  10. Re:Is it really necessary? by Chandon+Seldon · · Score: 4, Insightful

    How much would it cost to do it the Right Way from a user's point of view?

    Blocking with an error code is the Right Way. That way the sending mail server generates a bounce message and the sender knows that the message didn't get through. The idea of accepting every message so the user can have 50,000 messages in his spambox that will never get looked at for every real message is absurd.

    --
    -- The act of censorship is always worse than whatever is being censored. Always.