Dear all,
One of our residential customers is no longer able to reach his domain hosted by Cyon. According to their support, this is caused by a bad score from RBLs.
A quick check shows that these RBLs are dedicated to mail, not hosting. Did I miss a new magic bullet in the hosting scene where scoring is used for website access?
If you feel directly responsible, please contact me off-list.
Best regards,
Erich
On 13 Mar 2026, at 12:35, Erich Hohermuth via swinog swinog@lists.swinog.ch wrote:
Dear all, One of our residential customers is no longer able to reach his domain hosted by Cyon. According to their support, this is caused by a bad score from RBLs. A quick check shows that these RBLs are dedicated to mail, not hosting. Did I miss a new magic bullet in the hosting scene where scoring is used for website access?
People use RBLs for a all kinds of things.
And if an IP is in a email RBL, then likely it is a source of spam and other such stuff (depends on the RBL); thus would not be so odd that it might also host over HTTP some kind of phishing or other nefarious activity.
Maybe... not have bad things on an IP so that it ends up in an RBL? (be that mail, or more fun: https://safebrowsing.google.com https://safebrowsing.google.com/ so that you are for sure blocked from almost any browser in the world...
and if you are lucky to ammass too much nonsense and not act upon it, there is a list for that too:
https://www.spamhaus.org/blocklists/do-not-route-or-peer/
Of course there are sometimes false-positives, those can be rather annoying. Try to figure out which RBL the entry is in and see if they have a valid reason, for some RBLs (especially the 'pay to get out!') ones one sometimes just have to take a loss and convince people using it to not use those though.
People, clean up your networks, keep them nice and dandy!
If you are willing to publish which hostname is blocked, I can poke at data I have access to to see why it is blocked. But anybody is free to block anything, one's network, one's rules: autonomous systems et al....
Regards, Jeroen
Hi
Of course I can share the IP and the policy set by us: https://check.spamhaus.org/results/?query=82.220.86.46
Anyone can set their own rules. However, in my opinion, our community can do better and should not let customers play ping-pong between providers.
Regards Erich
------ Originalnachricht ------ Von "Jeroen Massar via swinog" swinog@lists.swinog.ch An "Erich Hohermuth" erich@hoh.ch Cc "swinog@lists.swinog.ch" swinog@lists.swinog.ch Datum 13.03.2026 14:16:32 Betreff [swinog] Re: Cyon public Blacklist usage
On 13 Mar 2026, at 12:35, Erich Hohermuth via swinog swinog@lists.swinog.ch wrote:
Dear all, One of our residential customers is no longer able to reach his domain hosted by Cyon. According to their support, this is caused by a bad score from RBLs. A quick check shows that these RBLs are dedicated to mail, not hosting. Did I miss a new magic bullet in the hosting scene where scoring is used for website access?
People use RBLs for a all kinds of things.
And if an IP is in a email RBL, then likely it is a source of spam and other such stuff (depends on the RBL); thus would not be so odd that it might also host over HTTP some kind of phishing or other nefarious activity.
Maybe... not have bad things on an IP so that it ends up in an RBL? (be that mail, or more fun: https://safebrowsing.google.com https://safebrowsing.google.com/ so that you are for sure blocked from almost any browser in the world...
and if you are lucky to ammass too much nonsense and not act upon it, there is a list for that too:
https://www.spamhaus.org/blocklists/do-not-route-or-peer/
Of course there are sometimes false-positives, those can be rather annoying. Try to figure out which RBL the entry is in and see if they have a valid reason, for some RBLs (especially the 'pay to get out!') ones one sometimes just have to take a loss and convince people using it to not use those though.
People, clean up your networks, keep them nice and dandy!
If you are willing to publish which hostname is blocked, I can poke at data I have access to to see why it is blocked. But anybody is free to block anything, one's network, one's rules: autonomous systems et al....
Regards, Jeroen
swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-leave@lists.swinog.ch
Hi
Crowdsec could als be active there. You can lookup their database: https://app.crowdsec.net/ct
cheers Michael
On 13.03.2026 12:35, Erich Hohermuth via swinog wrote:
Dear all,
One of our residential customers is no longer able to reach his domain hosted by Cyon. According to their support, this is caused by a bad score from RBLs.
A quick check shows that these RBLs are dedicated to mail, not hosting. Did I miss a new magic bullet in the hosting scene where scoring is used for website access?
If you feel directly responsible, please contact me off-list.
Best regards,
Erich
swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-leave@lists.swinog.ch
-
Erich Hohermuth -
Jeroen Massar -
Michael Righter