What IP are they connecting with? The HELO/EHLO can be spoofed right? We
see lots of connections from [EMAIL PROTECTED] but they are spam zombies
connecting from all over and certainly not really from Netzero. Most of
them don't survive delaying by ASSP.
Doug
----- Original Message -----
From: "Adam Campbell" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Monday, June 26, 2006 9:58 AM
Subject: RE: [IMail Forum] netzero
We're running 2006.04, and we get 15-20 T/Q pairs per day.
Most of them have EHLO = netzero.com.
adamc
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matrosity
Hosting
Sent: Monday, June 26, 2006 10:48
To: [email protected]
Subject: Re: [IMail Forum] netzero
Are you running 2006?
Doug Traylor wrote:
Interesting. We have _no_ files building up in our spool file at
all. Granted we get a lot less email than you with only 10k connections a
day. Besides the tools you have that work with Imail, do you have any
sort
of proxy or SMTP gateway before it? If I was going to block incoming
email
based on the spoofed 'from' field, I would block Hotmail long before
Netzero. :o)
Doug
PS. We use ASSP to do all our connection blocking, HELO validation,
RBL and SPF checking etc., it would work in front of your current solution
I
believe. The only thing you lose is the sending server that hits Imail,
MXguard, and Message sniffer will be ASSP and your own server IP. Other
than that, they will continue to work as before.
----- Original Message -----
From: Matrosity Hosting <mailto:[EMAIL PROTECTED]>
To: [email protected]
Sent: Monday, June 26, 2006 9:06 AM
Subject: Re: [IMail Forum] netzero
Since we host business websites we're currently blocking
[EMAIL PROTECTED] until this passes. I'm just tired of deleting thousands
of 50 Kb emails from the spool directory. Messagesniffer is grabbing the
rest of them that actually make good connections but why bother accepting
them.
Doug Traylor wrote:
Anyone else getting a ton of spam from
netzero accounts? I finally just blocked them altogether.
No more than anybody else. Are you blocking
everything from [EMAIL PROTECTED] or are you blocking their servers by
IP?
Doug
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
