[tor-relays] Tor Exit: Complaints of IP being used for "spam" despite exit policy

[Gary C. New]

Neel,
Your Exit Policies do appear to be configured to block standard smtp ports. Reach out to Psychz and request mail headers for sample pieces of spam originating from the offending Exits in question. This will assist in determining whether the spam is destine for non-standard smtp ports and you can adjust your Exit policies from there.

Respectfully,

Gary—
This Message Originated by the Sun.
iBigBlue 63W Solar Array (~12 Hour Charge)
+ 2 x Charmast 26800mAh Power Banks
= iPhone XS Max 512GB (~2 Weeks Charged) 

    On Wednesday, May 4, 2022, 1:20:17 AM MDT, Neel Chauhan <neel at neelc.org> wrote:  
 
 Hi,

A day or two ago, my Tor exit host, Psychz Networks, has sent me 
complaints about my IPs being used to send "spam" despite me having 
blocked Port 25 (and 465/587) in the exit policy.

Psychz threatened to block Port 25 even when my exit policy explicitly 
blocks 25/465/587.

The URLs I got were from Cisco Talos:

  * 
https://talosintelligence.com/reputation_center/lookup?search=104.149.136.246#email-history
  * 
https://talosintelligence.com/reputation_center/lookup?search=104.149.133.54#email-history

Sometimes I think "is my FreeBSD exploited and being used to send spam", 
but then I also see Linux relays on other ISPs also on the blocklists.

Yes, I am aware Tor exit relays will land on blacklists. But getting 
complaints from spam is new, especially when my relays are blocking 
SMTP.

I am worried I would have to find a new host if they continue 
complaining. Darn, Psychz has been one of the more reliable exit hosts 
(on-and-off) for many years, although they are more vigilant on abuse 
than say BuyVM.

BuyVM is similarly priced (although my Psychz is an special offer) and 
solid but has too many exits. OVH and TerraHost only allow exits on much 
more expensive dedicated servers. Prgmr and HostMaze allow exits but has 
so-so peering.

I just hope Psychz doesn't continue to complain.

-Neel
_______________________________________________
tor-relays mailing list
tor-relays at lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20220504/dae6e2f6/attachment.htm>