(OT) Mail got blocked because of SORBS/DYNABLOCK

[Reuben D. Budiardja]

Hi all,
Sorry if this is a little bit OT, but I know some people is knowledgeable 
about this.

I have a user who's trying to send email and found out the email got blocked 
by spamassasin (I think), with the following test: 
tests=RCVD_IN_DYNABLOCK,RCVD_IN_SORBS ver=2.63

That user use my SMTP server, with authentication, to relay the mail. After 
googling a bit, I figured out that the first test is just and implementation 
of RBL, and the second probably check it with the SORBS database.

I know my SMTP server is clean, and not listed in RBL or SORBS database (I 
checked that).
But when I check the originating IP of this user (he uses his own ISP) here:

http://www.dnsbl.us.sorbs.net/cgi-bin/lookup?js&IP=

I found entry in the "Dynamic IP Space " section. Looks like his ISP, or even 
his IP block is in the list of SORBS.
And this
http://mail-abuse.org/cgi-bin/lookup

shows his originating IP in the DUL list (whatever that is).

But the funny thing is, this user has another email account using another SMTP 
server, and when he send mail from that account it does not trigger the 
RCVD_IN_DYNABLOCK rule. So I don't quite understand it.

So my question basically, does changing SMTP server for his account (using his 
ISP SMTP server for example) help fixing this problem? If yes, why? if the 
rule looks at the originating IP instead of the SMTP, any SMTP server that he 
uses will still trigger the rule, won't it ? And why does his other account 
(with different SMTP) does not trigger that some DYNABLOCK rule?

Any help on this will be greatly appreciated.

RDB
-- 
Reuben D. Budiardja
Department of Physics and Astronomy
The University of Tennessee, Knoxville, TN
---------------------------------------------------------
"To be a nemesis, you have to actively try to destroy 
something, don't you? Really, I'm not out to destroy 
Microsoft. That will just be a completely unintentional 
side effect."
                 - Linus Torvalds -