Re: Email return address spoofing

2005-10-29 Thread Robert Seeberger
Max Battcher wrote:
> Horn, John wrote:
>> My wife and I have registered the domain name "cleaver-horn.com".
>> Some enterprising spammer out there has discovered that domain and
>> started using it as the return address on their spam.  So our inbox
>> is filling up with return mail, mail failture and anti-spam 
>> messages
>> all supposedly sent from email addresses like
>> "[EMAIL PROTECTED]" and such..  This, obviously, is very
>> annoying.  Other than setting up some filters that send anything
>> without a certain "valid" email prefixes to the great bit bucket, 
>> is
>> there anything we can do about this?
>
> Get a good spam filter.  A spam filter will filter out the anti-spam
> spam just as easily as the normal spam.
>
>> Is this something that is inevitable for anyone with a domain name?
>> Is it only a matter of time?
>
> Yes and yes, sadly.
>
>> One of my greatest worries is that some ISP or spam-filter out 
>> there
>> will decide that all mail coming from my domain must be spam and
>> will block it all.  Does that happen?  Is that something I should
>> even worry about?
>
> Yes, it happens all too often.  You really can't stop an ISP from
> deciding that your domain name is only used for spam; all you can
> really do in this day and age is to keep several back up email
> accounts just in case.  Sometimes if you (or better, your intended
> recipient at that ISP) email an ISP and say "my domain isn't spam"
> they will listen, but most ISPs really don't have any decent 
> policies
> for dealing with this.
> A really good ISP is often going to be able to tell the difference
> between spoofed and real spam domains, but there aren't that many 
> good
> ISPs left in the world.  Too many hire cheap hourly workers with 
> itchy
> trigger fingers.
>
> Even worse, this goes beyond just domain names, but mail servers as
> well.  If your host isn't that large either, you are going to end up
> fighting people claiming your host is a spammer, too.

AIUT,(and I just barely do) there is an upcoming system for email 
verification that should be implimented by the end of next year that 
should put a stop to a great deal of the "Zombie" generated spam and 
should also end some of the other forms of common email spoofing. One 
of the more notable proponents of this (one of two proposed systems) 
is MS, who seems to be quite serious about putting an end to this 
practice.

I'll go look for some links if anyone is interested, but I'd also like 
to hear some opinions if anyone is knowledgeable in this area.


xponent
Snuff Spam Maru
rob 


___
http://www.mccmedia.com/mailman/listinfo/brin-l


Re: Email return address spoofing

2005-10-29 Thread Max Battcher

Horn, John wrote:

My wife and I have registered the domain name "cleaver-horn.com".
Some enterprising spammer out there has discovered that domain and
started using it as the return address on their spam.  So our inbox
is filling up with return mail, mail failture and anti-spam messages
all supposedly sent from email addresses like
"[EMAIL PROTECTED]" and such..  This, obviously, is very
annoying.  Other than setting up some filters that send anything
without a certain "valid" email prefixes to the great bit bucket, is
there anything we can do about this?


Get a good spam filter.  A spam filter will filter out the anti-spam 
spam just as easily as the normal spam.



Is this something that is inevitable for anyone with a domain name?
Is it only a matter of time?


Yes and yes, sadly.


One of my greatest worries is that some ISP or spam-filter out there
will decide that all mail coming from my domain must be spam and
will block it all.  Does that happen?  Is that something I should
even worry about?


Yes, it happens all too often.  You really can't stop an ISP from 
deciding that your domain name is only used for spam; all you can really 
do in this day and age is to keep several back up email accounts just in 
case.  Sometimes if you (or better, your intended recipient at that ISP) 
email an ISP and say "my domain isn't spam" they will listen, but most 
ISPs really don't have any decent policies for dealing with this.


A really good ISP is often going to be able to tell the difference 
between spoofed and real spam domains, but there aren't that many good 
ISPs left in the world.  Too many hire cheap hourly workers with itchy 
trigger fingers.


Even worse, this goes beyond just domain names, but mail servers as 
well.  If your host isn't that large either, you are going to end up 
fighting people claiming your host is a spammer, too.


--
--Max Battcher--
http://www.worldmaker.net/
___
http://www.mccmedia.com/mailman/listinfo/brin-l


Email return address spoofing

2005-10-29 Thread Horn, John
My wife and I have registered the domain name "cleaver-horn.com".
Some enterprising spammer out there has discovered that domain and
started using it as the return address on their spam.  So our inbox
is filling up with return mail, mail failture and anti-spam messages
all supposedly sent from email addresses like
"[EMAIL PROTECTED]" and such..  This, obviously, is very
annoying.  Other than setting up some filters that send anything
without a certain "valid" email prefixes to the great bit bucket, is
there anything we can do about this?

Is this something that is inevitable for anyone with a domain name?
Is it only a matter of time?

One of my greatest worries is that some ISP or spam-filter out there
will decide that all mail coming from my domain must be spam and
will block it all.  Does that happen?  Is that something I should
even worry about?

 - jmh
___
http://www.mccmedia.com/mailman/listinfo/brin-l