Asian IPs it appears, starting with 221, 222, 61, 59, 58. Spoofed? Oh yes.
I'm quite impressed with ASSP's filtering. I can't make it primary until I resolve one issue with a subsidiary's email provider. adamc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Traylor Sent: Monday, June 26, 2006 11:09 To: [email protected] Subject: Re: [IMail Forum] netzero What IP are they connecting with? The HELO/EHLO can be spoofed right? We see lots of connections from [EMAIL PROTECTED] but they are spam zombies connecting from all over and certainly not really from Netzero. Most of them don't survive delaying by ASSP. Doug ----- Original Message ----- From: "Adam Campbell" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Monday, June 26, 2006 9:58 AM Subject: RE: [IMail Forum] netzero > We're running 2006.04, and we get 15-20 T/Q pairs per day. > > Most of them have EHLO = netzero.com. > > adamc > > ________________________________ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity > Hosting > Sent: Monday, June 26, 2006 10:48 > To: [email protected] > Subject: Re: [IMail Forum] netzero > > > Are you running 2006? > > Doug Traylor wrote: > > Interesting. We have _no_ files building up in our spool file at > all. Granted we get a lot less email than you with only 10k connections a > day. Besides the tools you have that work with Imail, do you have any > sort > of proxy or SMTP gateway before it? If I was going to block incoming > email > based on the spoofed 'from' field, I would block Hotmail long before > Netzero. :o) > > Doug > > PS. We use ASSP to do all our connection blocking, HELO validation, > RBL and SPF checking etc., it would work in front of your current solution > I > believe. The only thing you lose is the sending server that hits Imail, > MXguard, and Message sniffer will be ASSP and your own server IP. Other > than that, they will continue to work as before. > > > ----- Original Message ----- > From: Matrosity Hosting <mailto:[EMAIL PROTECTED]> > To: [email protected] > Sent: Monday, June 26, 2006 9:06 AM > Subject: Re: [IMail Forum] netzero > > Since we host business websites we're currently blocking > [EMAIL PROTECTED] until this passes. I'm just tired of deleting thousands > of 50 Kb emails from the spool directory. Messagesniffer is grabbing the > rest of them that actually make good connections but why bother accepting > them. > > Doug Traylor wrote: > > Anyone else getting a ton of spam from > netzero accounts? I finally just blocked them altogether. > > No more than anybody else. Are you blocking > everything from [EMAIL PROTECTED] or are you blocking their servers by > IP? > > Doug > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
