Brent & Ron

Sent the following to Earthlink after discussing with a Earthlink Tech:

Subject: Blocked E-Mail Notification
Date: September 25, 2007 1:12:35 PM EDT
To: blockedbyearthlink@abuse.earthlink.net

There is only one web site that is blocked from sending e-mail notifications to me by the Earthlink server

clubcobra.com

All other e-mail notifications from other domains are being received, except for the clubcobra.com domain

I spoke with Earthlink TechServices and my personal Earthlink account is not set up to block the domain in question, clubcobra.com

Please acknowledge the action being taken

************************************************** **********

Earthlink Reply, suggested response to Earthlink ?


Thank you for writing blockedbyearthlink@abuse.earthlink.net.

PLEASE READ THE ENTIRE EMAIL TO RESOLVE YOUR ISSUEThis address is only for issues where EarthLink appears to be blocking a mail server and mail is returned with the the following error messages: "550 Dynamic/zombied/spam IPs blocked. Write blockedbyearthlink@abuse.earthlink.net."

EarthLink may be blocking your mail server because the server is listed in a dynamic IP range, is listed as an open proxy, is listed as a compromised machine, or is major source of spam.

In order to help you with your issue we will need some information from you. If you are the administrator of this mail server, please follow the instructions below before emailing us back.

If you do not know what IP address your server is sending with, please contact the mail administrator of your company or your ISP and have them follow the instructions below.

If you are the administrator of the email server being blocked, please know you may be able to expedite unblocking by checking to see if your mail server is listed in the following lists and resolving before emailing us:

http://cbl.abuseat.org/lookup.cgi
Info from their site states: "What is the CBL? The CBL takes its source data from very large spamtraps/mail infrastructures, and only lists IPs exhibiting characteristics which are specific to open proxies of various sorts (HTTP, socks, AnalogX, wingate etc) which have been abused to send spam, worms/viruses that do their own direct mail transmission, or some types of trojan-horse or "stealth" spamware, without doing open proxy tests of any kind. In other words, the CBL only lists IPs that have attempted to send email to one of our servers in such a way as to indicate that the sending IP is infected." EarthLink blocks mail from all known proxies/zombies because they are major sources of spam.

http://www.spamhaus.org/sbl/index.lasso
Info from their site states: "Spamhaus tracks the Internet's Spammers, Spam Gangs and Spam Services, provides dependable realtime anti-spam protection for Internet networks, and works with Law Enforcement to identify and pursue spammers worldwide." EarthLink blocks mail from all known major sources of spam.

http://www.us.sorbs.net/lookup.shtml
Info from their site states: "Users of dynamically assigned IP addresses, please note that SORBS is not identifying you as a spammer. SORBS is identifying you as a dynamic IP address user, nothing more, nothing less." EarthLink blocks all known dynamic space from sending directly to our mail servers. Dynamic users should be sending their mail out through their ISP's static outbound mail servers, or their company's static outbound mail server.

Other spam databases to determine if your mail server IP has spam issues:
www.dnsstuff.com
http://www.moensted.dk/spam/

If your IP is not on any of these lists, is not dynamic, is not an open relay/proxy/zombie, please reply back to blockedbyearthlink@abuse.earthlink.net with "BLOCKED " in the subject line with the IP inserted. Blockedbyearthlink@abuse.earthlink.net does not block any mail sent to it, so we are asking for your mail to be sent to us in this format to help us sort out spam from legitimate reports. All reports sent to this address, not using this format will receive this auto response. This process will allow us minimize the amount of time to resolve any blocking issues.

Thank you for your cooperation,
EarthLink Abuse

I went thru ALL of the lists they provided and checked by domain name and IP address.....

...and we are not on any of the lists.

Use that last paragraph response and indicate 64.254.49.5 as the IP address to be unblocked.

Reply to their specified address with "BLOCKED 64.254.49.5" in the subject line

Thanks !!!! ..........received the ACK from Earthlink:

Hello,

We have removed the block on mail originating from 64.254.49.5,
please allow 2-24 hours for normal email traffic to resume.
Please understand that IPs previously removed from the
EarthLink Correct Connect database may be re-added in the
future should the server be discovered to again be open for
relay.

For more information on the problem of open relays, please visit:



For more information on the problem of open proxies, please see:




Regards,

Earthlink Abuse Department
abuse@abuse.earthlink.net
http://www.earthlink.net/about/policies/use/

...good job...thanks.

Brent & Ron

E-mail notifications are now being received...........

Thanks !!

Cool. Thanks for driving this Don.