What are the options here such as Praetor Messaging Firewall? Any others?
Thanks, John On Thu, 29 Apr 2004 17:41:17 -0400, [EMAIL PROTECTED] wrote: > Spammers usually have known email addresses from your domain. Using > those addresses as "from" address, and they send millions of emails > to > all over the world. Out of those millions, there are at least > thousands > of non-existing or bad destination email addresses from thousands of > domains. Those will bounced back to your server. That means > there's no > single IP to block, which makes blocking by IP useless. > > I would set up another SMTP gateway using Praetor Messaging > Firewall or > similar to filter those NDRs. (Note: 21 day evaluation copy can be > downloaded) Have incoming emails to come through that gateway. > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Steinar > Rasch > Sent: Thursday, April 29, 2004 5:16 PM > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] I'VE BEEN HIJACKED - HELP > > Yes. I think you are right. But how does it work? > > Do the spammers set up scripts to go through [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], etc. till [EMAIL PROTECTED] > > To add as senders addresses for this to actually work? > > And for ze big question (going on my 15' hour here): How do I stop > all > thses mails from reaching my users mail boxes? > > Will I have to find the spammers send IP's to add to a incomming > rule > for immediate deletion, or something like that? > > Regards, > Steinar > > >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of >> [EMAIL PROTECTED] >> Sent: 29. april 2004 22:35 >> To: [EMAIL PROTECTED] >> Subject: RE: [IMail Forum] I'VE BEEN HIJACKED - HELP >> >> I agree. Spammers must have used email addresses from your >> domain, >> not the SMTP server. Unless you have a filter that can filter >> NDRs, >> they will keep coming in thousands for days. >> >> -Johnny >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of R. >> Scott Perry >> Sent: Thursday, April 29, 2004 3:30 PM >> To: [EMAIL PROTECTED] >> Subject: Re: [IMail Forum] I'VE BEEN HIJACKED - HELP >> >> >>> Does anyone know how to stop an ongoing hijacking. >>> >>> Since yesterday I have received several thousand emails >> which seems to >>> be sent by my users, but this is not the case. >>> >>> Many of my users are getting many "undelivered mail" in return. >>> >>> I believe I have been hijacked by someone, but I can not >> find out who? >>> >>> How can I find out! >> >> There's about a 90% chance that this isn't hijacking, and that >> nobody >> used your server without your permission. >> >> The first step is to look at the headers from the bounce >> messages, and > >> see if the E-mail did come from your server. If not, you can just >> ignore it; it's a spammer using return addresses on your domain >> (99% >> of spam uses fake return addresses; they will eventually use >> yours). >> >> >> -Scott >> --- >> Declude JunkMail: The advanced anti-spam solution for IMail >> mailservers since 2000. >> Declude Virus: Ultra reliable virus detection and the leader in >> mailserver vulnerability detection. >> Find out what you've been missing: Ask for a free 30-day >> evaluation. >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> >> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> List Archive: >> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> >> >> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> List Archive: >> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> Denne eposten er skannet og funnet fri for virus av Epost.no med >> Declude og FRISK F-Prot Software. >> > > Denne eposten er skannet og funnet fri for virus av Epost.no med > Declude > og FRISK F-Prot Software. > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail- > archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ColdFusion ASP ActiveState PERL Hosting Includes 10 Domains - 100% Browser Based Administration http://www.cybersmarts.net LogFileManager - IIS LogFile Management Tool WebPageChecker - Helps Maintain Server UpTime http://www.serverautomationtools.com To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
