I have a customer who I host their domain.
Up to last week, all of their email was sent through us using SMTP
Auth.
However, his local ISP started blocking port 25 outbound, so he is now
forced to use the local ISP for sending his outbound email.
In setting up his SPF records, it appears if I
Yes. One of the flaws of SPF. However, you can also use a weaker SPF
record that says basically that you don't know what mail server it is coming
from. Not much point in that except to say that you're using SPF, though I
suppose it might be possible that a particular mail admin might penalize
Yep...definitely shows that SPF has some growing to do, but the situation
can improve with widespread adoption.
For your hotel situation, you might try setting your mail server to accept
SMTP AUTH traffic on port 587. That way if 25 is blocked but 587 is open
you can continue to use your mail
Saturday, September 11, 2004, 7:37:21 AM, Darin Cox wrote:
For your hotel situation, you might try setting your mail server to accept
SMTP AUTH traffic on port 587. That way if 25 is blocked but 587 is open
you can continue to use your mail server.
I thought Imail only has the capability of
- Original Message -
From: David Dodell [EMAIL PROTECTED]
For your hotel situation, you might try setting your mail server to
accept
SMTP AUTH traffic on port 587. That way if 25 is blocked but 587 is
open
you can continue to use your mail server.
I thought Imail only has the
My log files have trippled in size the last 3 days. I have taken out several
IPs to send for that were questionable and still I think I am hijacked but I
cannot figure out where it is coming from...I have no viruses (except in the
virus folder) so I must be hijacked..
Is there a way I can tell
Why don't you go in reverse? Take the all out to see if it stops. If it
doesn't, your hacked and you can probably put the IPs back in and deal with
that issue. If it does stop, them start putting them back in, one at a time
until you see a problem.
Darin.
- Original Message -
From:
Is there a way I can tell where the emails are coming from..I guess I can
keep taking out IPs until it stops?
That is not the way to guess correctly. You are either an open relay,
or one of your accounts was hacked, or your server was hacked. Blocking
by IP would be grossly innefective and
My log files have trippled in size the last 3 days.
Quick action is key to hijacking. The spammer has already gotten his
money's worth from your service. Three days of spamming before getting
kicked off is excellent for a spammer. They are happy with 12 hours if
they can get it.
Entering
I believe that SPF is almost all hype and hardly any value to speak of.
It was originally intended to authenticate hosts, but spammers quickly
caught on and started giving themselves SPF records (
http://netscape.com.com/2100-1009_22-5357269.html?part=netscapesubj=technewstag=mynetscape
). I
Quickly contact Declude for a trial of Declude Hijack, which is a Declude
product that just happens to be designed to stop this.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf
I believe that SPF is almost all hype and hardly any value to speak of.
I think this is a bit harsh. While SPF is certainly not the answer to all of
my prayers, it has some value.
It was originally intended to authenticate hosts, but spammers quickly
caught on and started giving
I actually saw it this happening but didnt know what was taking all my
resources...and I am not really that technical so it was just trial and
error and help from you folks...I took out the proxy IP in my allowable for
SMTP and everything seems to be back the way I am used toI guess I will
Sorry for the typos previously but this is what we figured out..
I have a proxy server that I use for content filtering...
I had its IP address in my allowable SMTP pool
They were running thru the proxy back to the Imail server...
I have no idea how they figured that out since my Imail server is
Oops, sorry. I missed all the other traffic under a different subject. You
got some excellent advice here. Good detective work, Richard!
-Dave
- Original Message -
From: Richard Farris [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, September 10, 2004 12:19 PM
Subject: Re:
As you mentioned, SPF Pass is pretty useless, but
SPF Fail is _very_ useful. It is one of the best and most authoritative
tests against forging spam, as they generally (hopefully!)would not be
sending from the mail server(s) used by that domain, thus would fail.
Properly implemented and
I believe there is a HF for Imail 8.05.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Danny K
Sent: Saturday, September 11, 2004 3:54 PM
To: [EMAIL PROTECTED]
Subject:
John,
I installed the latest patch Hotfix 3 and the problem still persists. I
just powered down the computer and powered back up just in case. SMTP
service shut down just a minute after starting. I can ping the DNS server
just fine so I don't think it is dns issue.
Any other ideas? Thanks for
I am not the best at troubleshooting Imail, but here goes.
What does the Queue Manager service do?
Do you have the SMTP service set to auto restart by way of the services MMC?
Open Task manager and click on the processes tab. Then, click on View. Add
columns Thread count and Handle count.
With
Hve you tried stoping Imails monitor service to see if that is causing the
problem. I know it has issues with monitoring web mail service on certain
servers.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Danny K
Sent: Saturday,
Queue Manager is still on when the SMTP service stops.
Yes, I have SMTP service set to auto restart.
I'm watching Handles and Threads and it is staying around 230 Handles and 17
Threads. I will keep an eye on it and see if this is the average or if it
changes.
-Original Message-
From:
- Original Message -
From: Danny K [EMAIL PROTECTED]
I installed the latest patch Hotfix 3 and the problem still persists. I
just powered down the computer and powered back up just in case. SMTP
service shut down just a minute after starting. I can ping the DNS server
just fine so
The application log does not show any problems. The System Log says:
Here is the error:
The IMail SMTP Server service terminated unexpectedly. It has done this 62
time(s). The following corrective action will be taken in 0 milliseconds:
No action.
-Original Message-
From: [EMAIL
Anyone know what the latest interim release of declude is and the link to
it? I want make sure I have the latest and if not try it just in case.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bill Landry
Sent: Saturday, September 11, 2004 5:14 PM
To:
Danny,
Did you move your Imail to a new computer when you upgraded. I had this
happen to us a while back with the 7.0 release of Imail. Finally called
IMail support and they checked some of my ip settings and found some
conflicts. They corrected them then and there and have had no problems
We have not made any changes to the server in awhile so don't remember what
we did the last time we upgraded. Everything has been working fine up until
last night.
I will call them first thing Monday.
Thank you
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
26 matches
Mail list logo
