backscatterer.org fake or serieus?

Hello Experts,

Some providers are listed on backscatterer,org,
They say they don't want to pay a criminal organisation for removal.
But after some investigation it don't seem malicious at all and mean you are sending NDR to the spammin sender.  
Now i get conflicting information about the matter.
So my question is simpel, do i have to take www.backscatterer.org serious or not.

Becouse now i cannot use "ip reputation in my spamfilter" becouse of it.
bastouwAsked:
Who is Participating?
 
Alan HardistyConnect With a Mentor Co-OwnerCommented:
Backscatterer.org is a serious site aimed at identifying mail servers that are configured incorrectly.

If you don't have recipient filtering enabled and then accept messages, then your server rejects the message because the recipient is not found, your server will send a NDR message back to the sender.  This is all well and good when the sender of the message is a genuine sender.

When the sender is a spammer and they have forged the From address, then you will be returning NDR messages back to people who haven't actually sent you a message, thus you are effectively spamming them.

To resolve this, you should enable Recipient Filtering on your server and this will stop the problem dead in it's tracks.

There are circumstances where your mail is sent via a 3rd party spam filtering host and then they send the filtered mail on to you.  If they don't Filter Invalid Recipients, then you will be rejecting the messages and also sending back an NDR message back.

With Recipient Filtering enabled, the onus is on the sender to produce the NDR message not the Recipient Server, so Backscatter does not happen and you won't get listed on the Backscatterer.org website and have mail-flow problems.
0
 
StephenMSExchangeConnect With a Mentor Commented:
If you are sending NDRs back at spammers, you should take steps to identify which addresses are Harvest Attacking you and block them in your delivery settings.

As for backscatterer.org, many organizations do not use them for reputation blacklisting, but some do. You can ignore them and make sure no one else is blacklisting you, and they should delist you eventually. You could always pay them as well... They are definately one of the 3-4 lists, you never want to get on.

Go to mxtoolbox and check your SMTP server's reputation. If they are the only one that are blocking you then you do not have much to deal with.

Do take care of the NDRs before a big ISP starts blocking your email and look up the spammers hosted domain. Then report the spamming to their abuse email address.
0
 
bastouwAuthor Commented:
Wel, the problem is that Cyberoam, Who make state of the art next-gen routers, does use these
lists,  simular to  http://www.commtouch.com/check-ip-reputation .

i stil have RBL en de RPD also as options, and can make my own black-list-list. but that is not the issue.

I wonder if it is reasoneble to ask a hosting provider to remove them selfves from this list or els we will move the domain to an other hosting provider,  or is the hosting provider in question in its right to express: we don't pay to get of a list?

Is it normal to pay if you wat to be removed immidiately? is this normal?  
0
 
Paul SolovyovskyConnect With a Mentor Senior IT AdvisorCommented:
It's a racket.  You can do this yourself and many times unless you resolve the issue that caused you to get on one of these lists you'll get put right back on.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.