The SA on that server isn’t active but we’re going to move over to SmarterMail with a new Declude anyway.
I was figuring that this client’s own account must be compromised, since it’s their return address. However, why does the country chain come out blank? Thanks, Ben P.S. Yes, I know we have Hijack but – try not to laugh – I’ve never used it and we’ve had it for years. From: Linda Pagillo Sent: Monday, October 22, 2012 9:25 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hey fellas, the list is still here, just not very active. I apologize for the delay in my response, Ben. It looks like you may have a compromised account on your server. Do you have a Declude service agreement? If yes, I will be happy to have a look at your server and let you know for sure. If not, you can enable Declude Hijack which is a part of your Declude suite and it should catch the emails being sent from the compromised account. Thanks. -------------------------------------------------------------------------------- From: "andyb@thumpernet" <an...@thumpernet.com> Sent: Monday, October 22, 2012 8:33 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hi, aha! Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 7:53:29 PM, you wrote: DC> Hi Andy, DC> He sent it to the Declude Junkmail list, of which you are a member. DC> However, the list is pretty much defunct. Declude switched to online forums DC> years ago, which effectively killed the list. DC> Darin. DC> -----Original Message----- DC> From: andyb@thumpernet DC> Sent: Monday, October 22, 2012 6:03 PM DC> To: Declude.JunkMail@declude.com DC> Subject: Re: [Declude.JunkMail] abused whitelist? DC> Hi, DC> I think you're sending this to the wrong place. Who/what company are DC> you looking for? DC> Thanks, DC> Andrew Baldwin DC> an...@thumpernet.com DC> an...@thumpernet.com DC> 315-277-0685 DC> Monday, October 22, 2012, 2:54:29 PM, you wrote: IA>> IA>> IA>> IA>> IA>> IA>> Hi, IA>> IA>> IA>> IA>> IA>> IA>> We have a client that is getting bounced spams. When I check IA>> the header, it looks like they’re being whitelisted through IA>> Declude. I checked the whitelisting settings and only have IA>> “whitelist auth” (autowhitelist is off). Does this mean their IA>> account is hacked? How else could the spam get whitelisted? IA>> IA>> IA>> IA>> IA>> IA>> Here is the Declude header, although I can’t figure out why the country DC> chain is blank. IA>> IA>> IA>> IA>> IA>> X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA>> X-Declude-Spoolname: D8baa03aa0000c020.smd IA>> X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA>> "http://www.declude.com/x-note.htm"; IA>> X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA>> X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA>> X-Country-Chain: IA>> IA>> IA>> Thanks, IA>> IA>> IA>> IA>> IA>> IA>> Ben IA>> --- This E-mail came from the Declude.JunkMail mailing list. To IA>> unsubscribe, just send an E-mail to imail...@declude.com, and type IA>> "unsubscribe Declude.JunkMail". The archives can be found at DC> http://www.mail-archive.com. DC> --- DC> This E-mail came from the Declude.JunkMail mailing list. To DC> unsubscribe, just send an E-mail to imail...@declude.com, and DC> type "unsubscribe Declude.JunkMail". The archives can be found DC> at http://www.mail-archive.com. DC> --- DC> This E-mail came from the Declude.JunkMail mailing list. To DC> unsubscribe, just send an E-mail to imail...@declude.com, and DC> type "unsubscribe Declude.JunkMail". The archives can be found DC> at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
