Arch Linux

splurben

Member

From: Augusta, Western Australia

Registered: 2014-02-28

Posts: 41

Website

Blacklist on DroneBL based on "Open Proxy"

Hey guys,

I'm running a standard Arch Linux setup.

Linux shovel 5.3.13-arch1-1 #1 SMP PREEMPT Sun, 24 Nov 2019 10:15:50 +0000 x86_64 GNU/Linux

No SMTP server or similar protocol running or even deliberately installed.

I've checked by remote & internal port scan that I have no open ports on my router/transceiver, much less a superfluous open port on the server (just 22 and 548 on the internal network).

I have a DroneBL blacklist report:

A listing in DroneBL is NOT always related to spam. But in most cases because of an open proxy !!!
Details about xx.xx.xx.xx
Country: United States of America (US)
Reverse: ip-xx-xx-xx-xx.seattle.us.northamericancoax.com
Autonomous System Number: Axxxxxx
Lookup results for xx.xx.xx.xx
There are listings for xx.xx.xx.xx in DroneBL. To get removed from our DNSBL, you will need to address all of these incident listings.
59xxxxx 	Nov-10-2018 03:30:40 GMT 	3 	IRC spam drone (litmus/sdbot/fyle) 	freenodegate 	- 	request removal

It is also listed similarly on Spamhaus ZEN.

This location is a dynamic IP provision, however this blacklist occurred on Nov 17th and I know that I was on this IP address at that time.

Should I be worried about this?

This is a tiny system connected to a large screen for video presentation.

Any help is greatly appreciated.

Splurben

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 13,326

Re: Blacklist on DroneBL based on "Open Proxy"

59xxxxx 	Nov-10-2018 03:30:40 GMT 	3 	IRC spam drone (litmus/sdbot/fyle) 	freenodegate 	- 	request removal

Where you on freenode irc at that time ?

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

splurben

Member

From: Augusta, Western Australia

Registered: 2014-02-28

Posts: 41

Website

Re: Blacklist on DroneBL based on "Open Proxy"

59xxxxx 	Nov-10-2018 03:30:40 GMT 	3 	IRC spam drone (litmus/sdbot/fyle) 	freenodegate 	- 	request removal

Where you on freenode irc at that time ?

No, don't use freenode at all.