[Declude.JunkMail] Hop not scanned when passed through Postini

2004-09-16 Thread Matt
Scott, I'm going to guess that this is an issue with RFC compliance of Postini in how it includes the received headers, but the following headers shows a first hop that isn't being looked up consistently when one of our clients have E-mail being forwarded through a Postini protected host. Rece

Re: [Declude.JunkMail] ATTACH action

2004-09-16 Thread Matt
They are a large financial institution, AIM.  One of these attacks also got relayed off of their bandwidth providers servers and ended up hitting me with three IP's at the same time.  I didn't look into this one, but I don't think it is wise to block outright.  I just want them to fix the addre

RE: [Declude.JunkMail] ATTACH action

2004-09-16 Thread Kevin Bilbee
Why not just block them from connecting to your server altogether??? Block their ip addresses. Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Matt > Sent: Thursday, September 16, 2004 4:58 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declu

Re: [Declude.JunkMail] ATTACH action

2004-09-16 Thread Matt
I was trying to add a message to the message that was being received. These boneheads from aim-ag.com hit us with 2,300 messages in under one just before noon and this isn't the first time that this happened. They forge the From address to say that is is coming from the same address as the To

Re: [Declude.JunkMail] ATTACH action

2004-09-16 Thread R. Scott Perry
I need to use the ATTACH action to bounce back unwanted E-mails to a single source that has been bombarding us with thousands of unwanted E-mails from a misconfigured automated system (it's some financial institution in Austria). I have followed the instructions on how to ATTACH, but I am sti

Re: [Declude.JunkMail] SPF and virtual domains

2004-09-16 Thread Dean Lawrence
Great! I figured that I would need to do it eventually, but I would rather do it in stages and not all at once. Dean On Thu, 16 Sep 2004 17:11:45 -0400, Sanford Whiteman <[EMAIL PROTECTED]> wrote: > > Does anyone know if setting up SPF for a primary domain would affect > > virtual domains that s

[Declude.JunkMail] ATTACH action

2004-09-16 Thread Matt
I need to use the ATTACH action to bounce back unwanted E-mails to a single source that has been bombarding us with thousands of unwanted E-mails from a misconfigured automated system (it's some financial institution in Austria). I have followed the instructions on how to ATTACH, but I am stil

Re: [Declude.JunkMail] SPF and virtual domains

2004-09-16 Thread Sanford Whiteman
> Does anyone know if setting up SPF for a primary domain would affect > virtual domains that shares it's IP in Imail? It will not "affect" them--which is both good and bad. If a domain doesn't have an SPF record, it will be rejected or negatively weighted by remote servers that _require_ SP

Re: [Declude.JunkMail] SPF and virtual domains

2004-09-16 Thread R. Scott Perry
Does anyone know if setting up SPF for a primary domain would affect virtual domains that shares it's IP in Imail? Will the virtual domains start to fail SPF tests because the IP that they are bound to in DNS lists only the primary domain's name in the SPF record. Will I be forced to setup SPF for

[Declude.JunkMail] SPF and virtual domains

2004-09-16 Thread Dean Lawrence
Does anyone know if setting up SPF for a primary domain would affect virtual domains that shares it's IP in Imail? Will the virtual domains start to fail SPF tests because the IP that they are bound to in DNS lists only the primary domain's name in the SPF record. Will I be forced to setup SPF for

Re: [Declude.JunkMail] More info ref: BADHEADERS SPAMHEADERS

2004-09-16 Thread Roderick A. Anderson
John Tolmachoff (Lists) wrote: > http://www.declude.com/Articles.asp?ID=100 Damn! I had this bookmarked but below a couple of other Declude articles and completely missed it. Thanks for the whack with the clue-stick. :-) Rod -- --- [This E-mail scanned for viruses by Declude Virus] --- [Th

Re: [Declude.JunkMail] Blacklisted again

2004-09-16 Thread Richard Farris
I emailed them and asked why they didnt sent anything to abusetheir email is not in there...thanxs anyway.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet" - Original Message - From: "Chuck Schick" <[EMAIL PROTECTED]>

RE: [Declude.JunkMail] More info ref: BADHEADERS SPAMHEADERS

2004-09-16 Thread John Tolmachoff \(Lists\)
http://www.declude.com/Articles.asp?ID=100 John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Roderick A. Anderson > Sent: Thursday, September 16, 2004 8:26 AM > To: [EMAIL

[Declude.JunkMail] More info ref: BADHEADERS SPAMHEADERS

2004-09-16 Thread Roderick A. Anderson
I have a script that sends an email using the Perl module Net::SMTP_Auth. The messages come through but end up in the spam folder marked as BADHEADERS and SPAMHEADERS. Looking at the on line documentation I can't find description as to what these look for or don't find. I've also passed the mess

RE: [Declude.JunkMail] Blacklisted again

2004-09-16 Thread Chuck Schick
When you get listed on spamcop they usually send a notice to your abuse contacts with full headers. You should be able to identify the source IP address from those headers and then use that IP to check you mail logs. Once you match up the spam with headers with the log files you should quickly se

Re: [Declude.JunkMail] Blacklisted again

2004-09-16 Thread Richard Farris
Thanks for the info..I will send this to my guys that are working on it... Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Larry Craddock To: [EMAIL PROTECTED] Sent: Thursday,

Re: [Declude.JunkMail] Blacklisted again

2004-09-16 Thread Larry Craddock
Good suggestion and if you're not familiar with linux and don't have time to learn right now just get the windows version. You'll need to install winpcap first and then ethereal. You can get them both here: http://www.ethereal.com/distribution/win32/ They work great.   Larry Craddock

RE: [Declude.JunkMail] Blacklisted again

2004-09-16 Thread Jeff Maze
Hook the server up to a hub and then hook another computer to the hub..  Next, get a network sniffer (Linux machine and ethereal works great) and sniff to see what information is being passed..  Run it for about 30 seconds and you should have enough information to begin working with..   Fr