Re: Spam Removal

2001-06-19 Thread Stephen Bosch

Roger Walker wrote:
 
 You Wrote:
 
 Please let know if you find a way to block all of the domains you mentioned.
 Also do you think someone like arin.net would have there blocks of ips on
 file and then we can just block them ?
 
 I believe IANA has the master list of IP blocks that lists where
 they are assigned to (high level):
 
 http://www.isi.edu/in-notes/iana/assignments/ipv4-address-space

Unfortunately this list doesn't offer the necessary granularity to allow
someone to block addresses in Korea and China. The closest you can come
here, it would seem, would be to block the entire Pacific Rim.

What about APNIC?

-Stephen-



Re: Spam Removal

2001-06-18 Thread Ed Weinberg

On Sun, 17 Jun 2001 17:13:51 -0500, Jeremy Suo-Anttila
[EMAIL PROTECTED] wrote:

I have already done this and yes i do have pop b4 smtp setup and running so
i am not asking about me being a relay as some people on the list think.
Does anyone know a good how to or site where i can get info on rejecting all
mail that is not addressed directly to me or my users ?

Sounds like you have a default mailbox set up.  Just remove that
mailbox and make sure each user has a .qmail file and those messages
will be bounce.

As to denying the servers they are using, I have been watching them.
They originate from a different address that traced to .kr or .cn or
some other unfriendly country, so you can't email their provider to
turn them off.

They also relay from a different relay each time.

Every time they start these campaigns I get their spam for a few days,
then every email address on their list gets 10 times the spam for a
while.

I am considering screening out ALL .cn and .kr mailservers.  Is there
an easy way to do that?


Ed Weinberg, Q5 Comm, LLC.
[EMAIL PROTECTED]
tel 914-713-7222
fax 914-713-7227 
Connecting you to the internet...



RE: Spam Removal

2001-06-18 Thread Jeremy Suo-Anttila

Please let know if you find a way to block all of the domains you mentioned.
Also do you think someone like arin.net would have there blocks of ips on
file and then we can just block them ?

Thanks

Jps



From: Ed Weinberg [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 18, 2001 10:13 AM Subject: Re: Spam Removal


On Sun, 17 Jun 2001 17:13:51 -0500, Jeremy Suo-Anttila
[EMAIL PROTECTED] wrote:

I have already done this and yes i do have pop b4 smtp setup and running so
i am not asking about me being a relay as some people on the list think.
Does anyone know a good how to or site where i can get info on rejecting
all
mail that is not addressed directly to me or my users ?

Sounds like you have a default mailbox set up.  Just remove that
mailbox and make sure each user has a .qmail file and those messages
will be bounce.

As to denying the servers they are using, I have been watching them.
They originate from a different address that traced to .kr or .cn or
some other unfriendly country, so you can't email their provider to
turn them off.

They also relay from a different relay each time.

Every time they start these campaigns I get their spam for a few days,
then every email address on their list gets 10 times the spam for a
while.

I am considering screening out ALL .cn and .kr mailservers.  Is there
an easy way to do that?


Ed Weinberg, Q5 Comm, LLC.
[EMAIL PROTECTED]
tel 914-713-7222
fax 914-713-7227
Connecting you to the internet...




RE: Spam Removal

2001-06-18 Thread Roger Walker

You Wrote:

Please let know if you find a way to block all of the domains you mentioned.
Also do you think someone like arin.net would have there blocks of ips on
file and then we can just block them ?

I believe IANA has the master list of IP blocks that lists where
they are assigned to (high level):

http://www.isi.edu/in-notes/iana/assignments/ipv4-address-space

-- 
Roger Walker
Tier III Messaging/News Team
Internet Applications, National Consumer IP
TELUS Corporation 780-493-2471




Re: Spam Removal

2001-06-18 Thread Ruprecht Helms

Hi,
...
I am considering screening out ALL .cn and .kr mailservers.  Is there
an easy way to do that?

how about the badmailfrom-file. I think append/inserting .cn and .kr to/in 
that file and all mails from that top-level domains will be rejected.

Regards,
Ruprecht




Re: Spam Removal

2001-06-18 Thread Nick (Keith) Fish

Ruprecht Helms wrote:
 
 Hi,
 ...
 I am considering screening out ALL .cn and .kr mailservers.  Is there
 an easy way to do that?
 
 how about the badmailfrom-file. I think append/inserting .cn and .kr to/in
 that file and all mails from that top-level domains will be rejected.
 
 Regards,
 Ruprecht

That will only help if .cn/.kr appears as the envelope sender.  You're
better of using tcpserver's rules file to block by domain address,
assuming they don't have false DNS entries to hide their origin, in which
case you would need to block by IP address.

-- 
Nick (Keith) Fish
Network Engineer
Triton Technologies, Inc.



Re: Spam Removal

2001-06-17 Thread Stephen Bosch

Jeremy Suo-Anttila wrote:
 
 I keep getting sent SPAM from this company based in CA trying to sell me a
 MasterDisc 2000 which i know is a scam i have followed all there procedures
 to remove my domains from there lists and they went and actaully added them
 and more to there lists so i ave been getting flooded with there crap mails.
 I have faxed in removal requests, emailed them, phoned them and they still
 will not remove my domains.

I realize this is like closing the barn door after the horse has
escaped, but ---

as a general rule, you *never* reply to To Remove, Send Us An E-mail
lines in a piece of spam. As you have now painfully discovered, 90% of
the time that information is used to send you yet more spam. For the
spammer, it's a confirmation that the address they have is valid.

-Stephen-



Re: Spam Removal

2001-06-17 Thread Nick (Keith) Fish

Jeremy Suo-Anttila wrote:
 
 I keep getting sent SPAM from this company based in CA trying to sell me a
 MasterDisc 2000 which i know is a scam i have followed all there procedures
 to remove my domains from there lists and they went and actaully added them
 and more to there lists so i ave been getting flooded with there crap mails.
 I have faxed in removal requests, emailed them, phoned them and they still
 will not remove my domains. Any suggestions on what i can do ? I would like
 to setup some sort of spam removal but i would also if possible like to take
 some sort of legal action.

Ahh . . . if only we could sue them, think of the money to be had there. 
In all seriousness, just throw their mail server's IP address/block into
your tcpservers' rules with a deny parameter.

-- 
Nick (Keith) Fish
Network Engineer
Triton Technologies, Inc.



Re: Spam Removal

2001-06-17 Thread Jeremy Suo-Anttila

I have already done this and yes i do have pop b4 smtp setup and running so
i am not asking about me being a relay as some people on the list think.
Does anyone know a good how to or site where i can get info on rejecting all
mail that is not addressed directly to me or my users ?

ie so if it get mail like i did earlier that was sent to :

[EMAIL PROTECTED]
[EMAIL PROTECTED]

It will just delete it or send it to a bulk mail folder ? I know that
hotmail and excite have features like this so it should be possible i belive
.

Thanks Again

Jps



 Jeremy Suo-Anttila wrote:
 
  I keep getting sent SPAM from this company based in CA trying to sell me
a
  MasterDisc 2000 which i know is a scam i have followed all there
procedures
  to remove my domains from there lists and they went and actaully added
them
  and more to there lists so i ave been getting flooded with there crap
mails.
  I have faxed in removal requests, emailed them, phoned them and they
still
  will not remove my domains. Any suggestions on what i can do ? I would
like
  to setup some sort of spam removal but i would also if possible like to
take
  some sort of legal action.

 Ahh . . . if only we could sue them, think of the money to be had there.
 In all seriousness, just throw their mail server's IP address/block into
 your tcpservers' rules with a deny parameter.

 --
 Nick (Keith) Fish
 Network Engineer
 Triton Technologies, Inc.