Re: Spam Removal

2001-06-19 Thread Stephen Bosch

Roger Walker wrote:
> 
> You Wrote:
> 
> >Please let know if you find a way to block all of the domains you mentioned.
> >Also do you think someone like arin.net would have there blocks of ips on
> >file and then we can just block them ?
> 
> I believe IANA has the master list of IP blocks that lists where
> they are assigned to (high level):
> 
> http://www.isi.edu/in-notes/iana/assignments/ipv4-address-space

Unfortunately this list doesn't offer the necessary granularity to allow
someone to block addresses in Korea and China. The closest you can come
here, it would seem, would be to block the entire Pacific Rim.

What about APNIC?

-Stephen-



Re: Spam Removal

2001-06-18 Thread Nick (Keith) Fish

Ruprecht Helms wrote:
> 
> Hi,
> >...
> >I am considering screening out ALL .cn and .kr mailservers.  Is there
> >an easy way to do that?
> 
> how about the badmailfrom-file. I think append/inserting .cn and .kr to/in
> that file and all mails from that top-level domains will be rejected.
> 
> Regards,
> Ruprecht

That will only help if .cn/.kr appears as the envelope sender.  You're
better of using tcpserver's rules file to block by domain address,
assuming they don't have false DNS entries to hide their origin, in which
case you would need to block by IP address.

-- 
Nick (Keith) Fish
Network Engineer
Triton Technologies, Inc.



Re: Spam Removal

2001-06-18 Thread Ruprecht Helms

Hi,
>...
>I am considering screening out ALL .cn and .kr mailservers.  Is there
>an easy way to do that?

how about the badmailfrom-file. I think append/inserting .cn and .kr to/in 
that file and all mails from that top-level domains will be rejected.

Regards,
Ruprecht




RE: Spam Removal

2001-06-18 Thread Roger Walker

You Wrote:

>Please let know if you find a way to block all of the domains you mentioned.
>Also do you think someone like arin.net would have there blocks of ips on
>file and then we can just block them ?

I believe IANA has the master list of IP blocks that lists where
they are assigned to (high level):

http://www.isi.edu/in-notes/iana/assignments/ipv4-address-space

-- 
Roger Walker
Tier III Messaging/News Team
Internet Applications, National Consumer IP
TELUS Corporation 780-493-2471




RE: Spam Removal

2001-06-18 Thread Jeremy Suo-Anttila

Please let know if you find a way to block all of the domains you mentioned.
Also do you think someone like arin.net would have there blocks of ips on
file and then we can just block them ?

Thanks

Jps



From: Ed Weinberg [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 18, 2001 10:13 AM Subject: Re: Spam Removal


On Sun, 17 Jun 2001 17:13:51 -0500, "Jeremy Suo-Anttila"
<[EMAIL PROTECTED]> wrote:

>I have already done this and yes i do have pop b4 smtp setup and running so
>i am not asking about me being a relay as some people on the list think.
>Does anyone know a good how to or site where i can get info on rejecting
all
>mail that is not addressed directly to me or my users ?

Sounds like you have a "default" mailbox set up.  Just remove that
mailbox and make sure each user has a .qmail file and those messages
will be bounce.

As to denying the servers they are using, I have been watching them.
They originate from a different address that traced to .kr or .cn or
some other unfriendly country, so you can't email their provider to
turn them off.

They also relay from a different relay each time.

Every time they start these campaigns I get their spam for a few days,
then every email address on their list gets 10 times the spam for a
while.

I am considering screening out ALL .cn and .kr mailservers.  Is there
an easy way to do that?


Ed Weinberg, Q5 Comm, LLC.
[EMAIL PROTECTED]
tel 914-713-7222
fax 914-713-7227
Connecting you to the internet...




Re: Spam Removal

2001-06-18 Thread Ed Weinberg

On Sun, 17 Jun 2001 17:13:51 -0500, "Jeremy Suo-Anttila"
<[EMAIL PROTECTED]> wrote:

>I have already done this and yes i do have pop b4 smtp setup and running so
>i am not asking about me being a relay as some people on the list think.
>Does anyone know a good how to or site where i can get info on rejecting all
>mail that is not addressed directly to me or my users ?

Sounds like you have a "default" mailbox set up.  Just remove that
mailbox and make sure each user has a .qmail file and those messages
will be bounce.

As to denying the servers they are using, I have been watching them.
They originate from a different address that traced to .kr or .cn or
some other unfriendly country, so you can't email their provider to
turn them off.

They also relay from a different relay each time.

Every time they start these campaigns I get their spam for a few days,
then every email address on their list gets 10 times the spam for a
while.

I am considering screening out ALL .cn and .kr mailservers.  Is there
an easy way to do that?


Ed Weinberg, Q5 Comm, LLC.
[EMAIL PROTECTED]
tel 914-713-7222
fax 914-713-7227 
Connecting you to the internet...



Re: Spam Removal

2001-06-17 Thread Jeremy Suo-Anttila

I have already done this and yes i do have pop b4 smtp setup and running so
i am not asking about me being a relay as some people on the list think.
Does anyone know a good how to or site where i can get info on rejecting all
mail that is not addressed directly to me or my users ?

ie so if it get mail like i did earlier that was sent to :

[EMAIL PROTECTED]
<[EMAIL PROTECTED]>

It will just delete it or send it to a bulk mail folder ? I know that
hotmail and excite have features like this so it should be possible i belive
.

Thanks Again

Jps



> Jeremy Suo-Anttila wrote:
> >
> > I keep getting sent SPAM from this company based in CA trying to sell me
a
> > MasterDisc 2000 which i know is a scam i have followed all there
procedures
> > to remove my domains from there lists and they went and actaully added
them
> > and more to there lists so i ave been getting flooded with there crap
mails.
> > I have faxed in removal requests, emailed them, phoned them and they
still
> > will not remove my domains. Any suggestions on what i can do ? I would
like
> > to setup some sort of spam removal but i would also if possible like to
take
> > some sort of legal action.
>
> Ahh . . . if only we could sue them, think of the money to be had there.
> In all seriousness, just throw their mail server's IP address/block into
> your tcpservers' rules with a deny parameter.
>
> --
> Nick (Keith) Fish
> Network Engineer
> Triton Technologies, Inc.
>




Re: Spam Removal

2001-06-17 Thread Nick (Keith) Fish

Jeremy Suo-Anttila wrote:
> 
> I keep getting sent SPAM from this company based in CA trying to sell me a
> MasterDisc 2000 which i know is a scam i have followed all there procedures
> to remove my domains from there lists and they went and actaully added them
> and more to there lists so i ave been getting flooded with there crap mails.
> I have faxed in removal requests, emailed them, phoned them and they still
> will not remove my domains. Any suggestions on what i can do ? I would like
> to setup some sort of spam removal but i would also if possible like to take
> some sort of legal action.

Ahh . . . if only we could sue them, think of the money to be had there. 
In all seriousness, just throw their mail server's IP address/block into
your tcpservers' rules with a deny parameter.

-- 
Nick (Keith) Fish
Network Engineer
Triton Technologies, Inc.



Re: Spam Removal

2001-06-17 Thread Stephen Bosch

Jeremy Suo-Anttila wrote:
> 
> I keep getting sent SPAM from this company based in CA trying to sell me a
> MasterDisc 2000 which i know is a scam i have followed all there procedures
> to remove my domains from there lists and they went and actaully added them
> and more to there lists so i ave been getting flooded with there crap mails.
> I have faxed in removal requests, emailed them, phoned them and they still
> will not remove my domains.

I realize this is like closing the barn door after the horse has
escaped, but ---

as a general rule, you *never* reply to "To Remove, Send Us An E-mail"
lines in a piece of spam. As you have now painfully discovered, 90% of
the time that information is used to send you yet more spam. For the
spammer, it's a confirmation that the address they have is valid.

-Stephen-



Spam Removal

2001-06-17 Thread Jeremy Suo-Anttila

I keep getting sent SPAM from this company based in CA trying to sell me a
MasterDisc 2000 which i know is a scam i have followed all there procedures
to remove my domains from there lists and they went and actaully added them
and more to there lists so i ave been getting flooded with there crap mails.
I have faxed in removal requests, emailed them, phoned them and they still
will not remove my domains. Any suggestions on what i can do ? I would like
to setup some sort of spam removal but i would also if possible like to take
some sort of legal action.

Any suggestions would be greatly appreciated. And i have pasted a header
from one of there mails below.

>

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 10844 invoked by uid 98); 17 Jun 2001 16:02:45 -
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 10842 invoked from network); 17 Jun 2001 16:02:44 -
Received: from tth.taiyo-toy.co.jp (HELO www.taiyo-toy.co.jp)
(210.225.132.20)
  by ns1.ideathcare.com with SMTP; 17 Jun 2001 16:02:44 -
Received: from












..!
 ..
From: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
Date: Sun, 17 Jun 2001 12:09:02 -0400
To: [EMAIL PROTECTED]
Subject: MasterCD 2001 -   Customer Sources


>

I know that replying to them will not work since the obvious are not a
legitimate company. Why else would they use yahoo.com and excite.com email
addresses for there return. I just do not see where i can block out there IP
with my TCP Server. every letter i get from them is a different source
account.

Thanks

Jeremy Suo-Anttila
[EMAIL PROTECTED]