Spamdyke's blacklist_rdns file add:
.info 2012/3/28 Ronnie Tartar <rtar...@host2max.com> > When I look in my queue, I can't tell if these are bounce messages or what? > > messages in queue: 10 > messages in queue but not yet preprocessed: 0 > 28 Mar 2012 08:34:35 GMT #5833492 92757 <> > remote padritzi...@hendsnatus.info > 28 Mar 2012 17:12:34 GMT #5833515 78302 <> > remote padritzi...@mowiedelas.info > 28 Mar 2012 17:28:41 GMT #5833516 77837 <> > remote > 1c80f04a7layfovcia3j2xpiaaaaabyaep3vsuga5wyyaa...@target.bfi0.com > 28 Mar 2012 14:36:37 GMT #5833494 96508 <> > remote pete...@meionasig.info > 28 Mar 2012 14:44:23 GMT #5833499 147910 <> > remote peter...@clairwhots.info > 28 Mar 2012 17:08:53 GMT #5833523 145656 <contac...@kremp.com> > remote charissa.rom...@weathford.com > 28 Mar 2012 17:19:26 GMT #5833524 95493 <> > remote padritzik...@studedarop.info > 28 Mar 2012 14:46:41 GMT #5833503 148034 <> > remote padritzik...@clairwhots.info > 28 Mar 2012 09:50:50 GMT #5833457 92631 <> > remote pete...@hendsnatus.info > 28 Mar 2012 16:04:19 GMT #5833507 97097 <> > remote padritzi...@bolrcunits.info > > They look bogus. How can these be prevented? > > Thanks in advance. > > > From: Ronnie Tartar [mailto:rtar...@host2max.com] > Sent: Wednesday, March 28, 2012 10:49 AM > To: qmailtoaster-list@qmailtoaster.com > Subject: RE: [qmailtoaster] Still some problems with reputation and > spammers > > Some additional, how can I stop this? > > 03-28 10:46:35 tcpserver: status: 2/200 > 03-28 10:46:36 CHKUSER accepted sender: from > <padritzik...@clairwhots.info::> remote > <aoig02.kaverblunk.info:unknown:199.19.94.66> rcpt <> : sender accepted > 03-28 10:46:36 CHKUSER accepted any rcpt: from > <padritzik...@clairwhots.info::> remote > <aoig02.kaverblunk.info:unknown:199.19.94.66> rcpt <padrit...@mbninc.com> > : > accepted any recipient for this domain > 03-28 10:46:36 policy_check: remote padritzik...@clairwhots.info -> local > xxx...@mbninc.com (UNAUTHENTICATED SENDER) > 03-28 10:46:36 policy_check: policy allows transmission > 03-28 10:46:36 tcpserver: status: 3/200 > 03-28 10:46:36 tcpserver: pid 3831 from 75.102.9.134 > 03-28 10:46:36 tcpserver: ok 3831 mail.host2max.com:72.29.91.110:25 > :75.102.9.134::42262 > 03-28 10:46:36 CHKUSER accepted sender: from <sm...@makibrid.info::> > remote > <fqye134.makibrid.info:unknown:75.102.9.134> rcpt <> : sender accepted > 03-28 10:46:37 tcpserver: end 3831 status 0 > > From: Ronnie Tartar [mailto:rtar...@host2max.com] > Sent: Wednesday, March 28, 2012 9:01 AM > To: qmailtoaster-list@qmailtoaster.com > Subject: [qmailtoaster] Still some problems with reputation and spammers > > I’ve been looking @ my qmail logs. > > I have spamdyke installed. The following is an section of my qmail log. > Are they still using bounce messages as a way to spam? > > I found some full mailboxes that I deleted that were particularly effected. > > > 03-28 08:55:58 tcpserver: status: 2/200 > 03-28 08:55:58 tcpserver: pid 18349 from 108.171.242.42 > 03-28 08:55:58 tcpserver: ok 18349 mail.host2max.com:72.29.91.110:25 > :108.171.242.42::50491 > 03-28 08:55:58 CHKUSER accepted sender: from > <bounce-5534-2742441560-swk=kremp....@drwhotardis.com::> remote > <dr423573.drwhotardis.com:unknown:108.171.242.42> rcpt <> : sender > accepted > 03-28 08:55:58 tcpserver: end 18349 status 0 > 03-28 08:55:58 tcpserver: status: 1/200 > 03-28 08:56:01 tcpserver: status: 2/200 > 03-28 08:56:01 tcpserver: pid 18360 from 76.191.102.213 > 03-28 08:56:01 tcpserver: ok 18360 mail.host2max.com:72.29.91.110:25 > :76.191.102.213::27298 > 03-28 08:56:02 CHKUSER accepted sender: from > <southwestairli...@donwisemanassociates.com::> remote > <finance.donwisemanassociates.com:unknown:76.191.102.213> rcpt <> : sender > accepted > 03-28 08:56:02 tcpserver: end 18360 status 0 > 03-28 08:56:02 tcpserver: status: 1/200 > 03-28 08:56:02 CHKUSER accepted sender: from <bou...@bounce.thelaw.net::> > remote <smtp.thelaw.net:unknown:66.181.1.109> rcpt <> : sender accepted > > > > --------------------------------------------------------------------------------- > Qmailtoaster is sponsored by Vickers Consulting Group ( > www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and installations. > If you need professional help with your setup, contact them today! > > --------------------------------------------------------------------------------- > Please visit qmailtoaster.com for the latest news, updates, and > packages. > > To unsubscribe, e-mail: > qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: > qmailtoaster-list-h...@qmailtoaster.com > > >
