[plug] spamo-disaster :(

[Craig Ringer]

Shayne O'Neill wrote:

> It pans out we are now listed on a bunch of spam db's.
> 
> Any suggestions on getting off those things?

Reqest a re-test using their web interface if they provide one, contact 
them if they have any method to do so and don't provide automated 
removal, then wait.

I was blacklisted by ORDB for 8 hours :-( after someone found a really 
tricky way to exploit a misconfiguration in our setup. The gateway 
server was passing %-addressed mail through rather than rejecting it, 
and sendmail was set to relay mail from the gateway server not just 
accept mail. Sendmail being sendmail thought "Hey, I should relay these 
percent addressed messages nobody ever, ever uses anymore by default! 
This percent addressed msg just came from the gateway, which is OK for 
relaying, so I'll relay it!". *sigh*.

I just set our mailserver to gateway outgoing mail via our co-located 
web server and all was peachy again. Once I figured out I could do that, 
anyway. We still called more couriers that day than in an average 3 
month period :-(

--
Craig Ringer