Goran,
I can't seem to find any of thier records in in DNS (see dig's below). Not
to mention it looks like this domain is fresh as it was Created on
2005-Feb-02.
C:\dig @68.168.224.162 hotstockprofiler.com MX
; DiG 9.2.3 @68.168.224.162 hotstockprofiler.com MX
;; global options: printcmd
;;
Aside from shortening my number of retries is there anything that I
can do? Somehow I think not.
No. The server is performing sender address verification, failing, but
giving a retry (4xx) code instead of a failure (5xx) code. Once your
server sees the retry code, it, well, retries. By
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Sanford Whiteman
Sent: Sunday, February 06, 2005 9:08 PM
To: Goran Jovanovic
Subject: Re: [Declude.JunkMail] What to do about SMTP Delivery
Failures
Aside from shortening my number of retries
Hi Goran-
A WHOIS query on hotstockprofiler.com
returns NS.X-DNSSECURE.NET and NS.Z-DNSSECURE.NET.
Both DNS servers return unknown domain
errors.
The registered owner of
hotstockprofiler.com is an outfit called "1 Momentum Traders" of Coral Gables,
FL, whose email address appears to be
: [Declude.JunkMail]
What to do about spam getting through?
Welcome to the newest fine art, spam
detection.
I try to look for patters. They could be
URLs in the body, key word strings, strings in the headers and so forth.
One thing I would suggest (if not
already used) is to use SpamCheck
PROTECTED]
Subject: RE: [Declude.JunkMail]
What to do about spam getting through?
Welcome to the newest fine art, spam
detection.
I try to look for patters. They could be
URLs in the body, key word strings, strings in the headers and so forth.
One thing I would suggest (if not
already
Looks
like you have a good handle on it. You need to look at all of these things and
choose the ones that fit the particular spam
campaign/spammer.
Spam
blocking takes a lot of fine tuning.
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL
Welcome to the newest fine art, spam
detection.
I try to look for patters. They could be
URLs in the body, key word strings, strings in the headers and so forth.
One thing I would suggest (if not
already used) is to use SpamCheck. Using spam check for body filters is less
resource
-
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, December 02, 2003 6:35 PM
Subject: Re: [Declude.JunkMail] What is this about ??
Also it seems that declude is claiming that 216.204.154.7 has no MX.
DnsStuff.com reports:
Actually, that's a server of yours
X-RBL-Warning: Declude CAUGHT-NO ABUSE
X-RBL-Warning: HELOBOGUS: Domain web1.sslsales.com has no MX or A records.
In this case, part of the problem seems to be that your local DNS server
isn't able to resolve web1.sslsales.com -- could it be that you have a
local DNS server that is resolving
Subject: Re: [Declude.JunkMail] What is this about ??
X-RBL-Warning: Declude CAUGHT-NO ABUSE
X-RBL-Warning: HELOBOGUS: Domain web1.sslsales.com has no MX or A
records.
In this case, part of the problem seems to be that your local DNS server
isn't able to resolve web1.sslsales.com -- could
X-RBL-Warning: HELOBOGUS: Domain web1.sslsales.com has no MX or A records.
Is that odd ? Could it be something with the mail server ???
My guess is that the two different mailservers are using two different DNS
servers, one of which thinks it is authoritative for sslsales.com (and is
reporting
]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 5:53 PM
Subject: Re: [Declude.JunkMail] What is this about ??
X-RBL-Warning: HELOBOGUS: Domain web1.sslsales.com has no MX or A
records.
Is that odd ? Could it be something with the mail server ???
My guess is that the two different
I've gotten serveral of these the past few minutes.
Below are the full headers ..I'm assuming they are trying to relay ???
It's hard to say what spammers are doing when they aren't sending a real
spam to someone. They may be making relay attempts, they may be checking
to see if you have
, December 02, 2003 2:57 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] What is this about ??
I've gotten serveral of these the past few minutes.
Below are the full headers ..I'm assuming they are trying to relay ???
It's hard to say what spammers are doing when they aren't sending a real
our web servers that use email to the customers
email box for order processing.
Thanks !
Dave
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, December 02, 2003 7:57 AM
Subject: Re: [Declude.JunkMail] What is this about ??
I've gotten
Also it seems that declude is claiming that 216.204.154.7 has no MX.
DnsStuff.com reports:
Actually, that's a server of yours, which you've let Declude JunkMail know
about.
How do I tell it not to know about it and my web servers as well? So they
dont fail the MX test.
That's not the problem --
17 matches
Mail list logo
