Fusesource.com site has become inaccessible from most of the enterprises...

[sanjayeipl]

Starting today fusesource.com site has become inaccessible from the organizations that are using Cisco's IronPort SenderBase Security Network services. When I checked with my network admin he gave me following information...

->>>>>>>>

The current Web Reputation Score for the link you provided (fusesource.com) is -7.1, this score is considered as poor reputation.

Here is the output when accessing that URL:

User Information

User Name: None

Group Membership: None

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.47 Safari/536.11

URL Check

WBRS Score: -7.1

Policy Match

IronPort Data Security policy: None

Decryption policy: None

Routing policy: None

Identity policy: Global Identity Policy

Access policy: Global Access Policy

Final Result

Request blocked

Details: Request blocked based on Web Reputation score

Trace session complete

Senderbase is blocking the site since it has exhibited highly suspicious activity and apparently by going to this site users are at high risk of getting infected with malware.

If you consider accessing this link is relevant to you daily work or the page is not malicious, you can contact [e-mail] in order to dispute the score or get more details about why the page has been involved with malicious activity. Only Senderbase can modify the score given to a page.

-<<<<<<<<<

[pharsha]

Hi there,

Our domains had somehow gotten entered in pbl.spamhaus.com (see http://www.spamhaus.org/pbl for details).  We think this is a result of authentication issues encountered while transitioning from Slicehost to Rackspace (Rackspace acquired Slicehost, our ISP).  These have been addressed and we've submitted an update to spamhuas.  Everything should be back to normal shortly.

Thank you for bringing this to our attention.

-Paul

[pharsha]

BTW, senderbase appears to have issues with their threat assessment. Per spamhaus:

"The first thing to know is: THE PBL IS NOT A BLACKLIST. You are not listed for spamming or for anything you have done. The PBL is simply a list of all of the world's dynamic IP space, i.e: IP ranges normally assigned to ISP broadband customers (DSL, DHCP, PPP, cable, dialup). It is perfectly normal for dynamic IP addresses to be listed on the PBL. In fact all dynamic IP addresses in the world should be on the PBL. Even static IPs which do not send mail should be listed in the PBL. "

That's nowhere near "Senderbase is blocking the site since it has exhibited highly suspicious activity and apparently by going to this site users are at high risk of getting infected with malware."

The spamhaus PBL was the only negative info on the senderbase list for us.  You might want to contact their customer support, since it's likely they'll block other sites.

Edited by: pharsha on Jul 15, 2012 1:28 AM

[sanjayeipl]

Fusesource.com is now available and back in action

-Sanjay