How do I bock aol users from port 25

[Steven E. Protter]

I am testing the following:

access file

aol.com 550 Spam. Only valid aol mail servers. $1000 fee applies
imo-d01.mx.aol.com OK
imo-d02.mx.aol.com OK
imo-d03.mx.aol.com OK
imo-d04.mx.aol.com OK
imo-d05.mx.aol.com OK
imo-d06.mx.aol.com OK
imo-d07.mx.aol.com OK
imo-d08.mx.aol.com OK
imo-d09.mx.aol.com OK
imo-d10.mx.aol.com OK
imo-r01.mx.aol.com OK
imo-r02.mx.aol.com OK
imo-r03.mx.aol.com OK
imo-r04.mx.aol.com OK
imo-r05.mx.aol.com OK
imo-r06.mx.aol.com OK
imo-r07.mx.aol.com OK
imo-r08.mx.aol.com OK
imo-r09.mx.aol.com OK
imo-r10.mx.aol.com OK
imo-m01.mx.aol.com OK
imo-m02.mx.aol.com OK
imo-m03.mx.aol.com OK
imo-m04.mx.aol.com OK
imo-m05.mx.aol.com OK
imo-m06.mx.aol.com OK
imo-m07.mx.aol.com OK
imo-m08.mx.aol.com OK
imo-m09.mx.aol.com OK
imo-m10.mx.aol.com OK

snip.

Can someone with an aol account send mail to sprotter@investmenttool.com and see if it gets through?

SEP

[Steven E. Protter]

SUCCESS!

Bunny time.

Geoff the mail servers on your list are aol's incoming mail servers. They will never send you mail. Use my list.

I've successfully tested it with one of my private customers aol accounts.

I'm home now btw.

SEP

[Geoff Wild]

Cool - thanks Steven - yeah - I saw I grabbed the wrong servers.

No points for this post.

Thanks...Geoff

[Steven E. Protter]

I was wrong, it wasn't fixed. All mail still rejects on Geoff and my config.

So I set up rejects on all of AOL's dial up IP blocks.

That will cut down the trafiic a lot.

All has been quiet on this front for 24 hours.

Still monitoring and testing.

SEP

[Steven E. Protter]

All quiet on the spam front.

Read this there is some good info here.
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=424086

SEP

[Geoff Wild]

Hmnn.... so far, I can't detect anything wrong - for example, why does this work:

To:mydomain.ca ERROR:"553 reject...."
gjwild@mydomain.ca OK
lawild@mydomain.ca OK
webmaster@mydomain.ca OK
info@mydomain.ca OK

and this doesn't:

aol.com ERROR:"550 - we do no accept mail from AOL dial up users directly..."
imo-d01.mx.aol.com OK
imo-d02.mx.aol.com OK
imo-d03.mx.aol.com OK
etc...

Doesn't make sense - both should work....

Unfortunatly, (or maybe a blessing) I don't know anybody on AOL...


Rgds...Geoff

[Steven E. Protter]

The both should Geoff.

It could be something about how aol does their mail system.

What version of sendmail do you use.

BTW when you post to my threads you get something.

SEP

[Geoff Wild]

I'm using Version 8.12.10

Though I see 8.12.11 was release Jan 18...

I see you are on tonight - same here - currently migrating our SAP Production to a new SAN environment - 2GB pipes all the way through.

Rgds...Geoff

[Geoff Wild]

Just reading:

http://www.sendmail.org/m4/anti_spam.html#access_db

For example:

cyberspammer.com ERROR:"550 We don't accept mail from spammers"
okay.cyberspammer.com OK

would accept mail from okay.cyberspammer.com, but would reject mail from all other hosts at cyberspammer.com with the indicated message.

That tells me that what we are doing should work.

Rgds...Geoff

[Steven E. Protter]

I read that too. Thats how I devised by scheme.

I'm going to call the aol postmaster help desk from http://postmaster.aol.com and see what they say. I'm trying to do them a favor protect their users from spam relay, maybe they will help.

SEP