Re: [Declude.JunkMail] abused whitelist?
The SA on that server isn’t active but we’re going to move over to SmarterMail with a new Declude anyway. I was figuring that this client’s own account must be compromised, since it’s their return address. However, why does the country chain come out blank? Thanks, Ben P.S. Yes, I know we have Hijack but – try not to laugh – I’ve never used it and we’ve had it for years. From: Linda Pagillo Sent: Monday, October 22, 2012 9:25 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hey fellas, the list is still here, just not very active. I apologize for the delay in my response, Ben. It looks like you may have a compromised account on your server. Do you have a Declude service agreement? If yes, I will be happy to have a look at your server and let you know for sure. If not, you can enable Declude Hijack which is a part of your Declude suite and it should catch the emails being sent from the compromised account. Thanks. From: andyb@thumpernet an...@thumpernet.com Sent: Monday, October 22, 2012 8:33 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hi, aha! Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 7:53:29 PM, you wrote: DC Hi Andy, DC He sent it to the Declude Junkmail list, of which you are a member. DC However, the list is pretty much defunct. Declude switched to online forums DC years ago, which effectively killed the list. DC Darin. DC -Original Message- DC From: andyb@thumpernet DC Sent: Monday, October 22, 2012 6:03 PM DC To: Declude.JunkMail@declude.com DC Subject: Re: [Declude.JunkMail] abused whitelist? DC Hi, DC I think you're sending this to the wrong place. Who/what company are DC you looking for? DC Thanks, DC Andrew Baldwin DC an...@thumpernet.com DC an...@thumpernet.com DC 315-277-0685 DC Monday, October 22, 2012, 2:54:29 PM, you wrote: IA IA IA IA IA IA Hi, IA IA IA IA IA IA We have a client that is getting bounced spams. When I check IA the header, it looks like they’re being whitelisted through IA Declude. I checked the whitelisting settings and only have IA “whitelist auth” (autowhitelist is off). Does this mean their IA account is hacked? How else could the spam get whitelisted? IA IA IA IA IA IA Here is the Declude header, although I can’t figure out why the country DC chain is blank. IA IA IA IA IA X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA X-Declude-Spoolname: D8baa03aac020.smd IA X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA http://www.declude.com/x-note.htm; IA X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA X-Country-Chain: IA IA IA Thanks, IA IA IA IA IA IA Ben IA --- This E-mail came from the Declude.JunkMail mailing list. To IA unsubscribe, just send an E-mail to imail...@declude.com, and type IA unsubscribe Declude.JunkMail. The archives can be found at DC http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] abused whitelist?
I remember a few years back that people were reporting a blank country chain. It may be a glitch that you are seeing. I can't recall the version that it happened in, but I know it has been resolved since then with our newer versions. From: IMail Admin imailad...@bcwebhost.net Sent: Tuesday, October 23, 2012 4:00 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? The SA on that server isn't active but we're going to move over to SmarterMail with a new Declude anyway. I was figuring that this client's own account must be compromised, since it's their return address. However, why does the country chain come out blank? Thanks, Ben P.S. Yes, I know we have Hijack but - try not to laugh - I've never used it and we've had it for years. From: Linda Pagillo Sent: Monday, October 22, 2012 9:25 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hey fellas, the list is still here, just not very active. I apologize for the delay in my response, Ben. It looks like you may have a compromised account on your server. Do you have a Declude service agreement? If yes, I will be happy to have a look at your server and let you know for sure. If not, you can enable Declude Hijack which is a part of your Declude suite and it should catch the emails being sent from the compromised account. Thanks. From: andyb@thumpernet an...@thumpernet.com Sent: Monday, October 22, 2012 8:33 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hi, aha! Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 7:53:29 PM, you wrote: DC Hi Andy, DC He sent it to the Declude Junkmail list, of which you are a member. DC However, the list is pretty much defunct. Declude switched to online forums DC years ago, which effectively killed the list. DC Darin. DC -Original Message- DC From: andyb@thumpernet DC Sent: Monday, October 22, 2012 6:03 PM DC To: Declude.JunkMail@declude.com DC Subject: Re: [Declude.JunkMail] abused whitelist? DC Hi, DC I think you're sending this to the wrong place. Who/what company are DC you looking for? DC Thanks, DC Andrew Baldwin DC an...@thumpernet.com DC an...@thumpernet.com DC 315-277-0685 DC Monday, October 22, 2012, 2:54:29 PM, you wrote: IA IA IA IA IA IA Hi, IA IA IA IA IA IA We have a client that is getting bounced spams. When I check IA the header, it looks like they're being whitelisted through IA Declude. I checked the whitelisting settings and only have IA whitelist auth (autowhitelist is off). Does this mean their IA account is hacked? How else could the spam get whitelisted? IA IA IA IA IA IA Here is the Declude header, although I can't figure out why the country DC chain is blank. IA IA IA IA IA X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA X-Declude-Spoolname: D8baa03aac020.smd IA X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA http://www.declude.com/x-note.htm; IA X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA X-Country-Chain: IA IA IA Thanks, IA IA IA IA IA IA Ben IA --- This E-mail came from the Declude.JunkMail mailing list. To IA unsubscribe, just send an E-mail to imail...@declude.com, and type IA unsubscribe Declude.JunkMail. The archives can be found at DC http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] abused whitelist?
Hi, I think you're sending this to the wrong place. Who/what company are you looking for? Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 2:54:29 PM, you wrote: IA IA IA IA IA IA Hi, IA IA IA IA IA IA We have a client that is getting bounced spams. When I check IA the header, it looks like they’re being whitelisted through IA Declude. I checked the whitelisting settings and only have IA “whitelist auth” (autowhitelist is off). Does this mean their IA account is hacked? How else could the spam get whitelisted? IA IA IA IA IA IA Here is the Declude header, although I can’t figure out why the country chain is blank. IA IA IA IA IA X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA X-Declude-Spoolname: D8baa03aac020.smd IA X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA http://www.declude.com/x-note.htm; IA X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA X-Country-Chain: IA IA IA Thanks, IA IA IA IA IA IA Ben IA --- This E-mail came from the Declude.JunkMail mailing list. To IA unsubscribe, just send an E-mail to imail...@declude.com, and type IA unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] abused whitelist?
Hi Andy, He sent it to the Declude Junkmail list, of which you are a member. However, the list is pretty much defunct. Declude switched to online forums years ago, which effectively killed the list. Darin. -Original Message- From: andyb@thumpernet Sent: Monday, October 22, 2012 6:03 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hi, I think you're sending this to the wrong place. Who/what company are you looking for? Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 2:54:29 PM, you wrote: IA IA IA IA IA IA Hi, IA IA IA IA IA IA We have a client that is getting bounced spams. When I check IA the header, it looks like they’re being whitelisted through IA Declude. I checked the whitelisting settings and only have IA “whitelist auth” (autowhitelist is off). Does this mean their IA account is hacked? How else could the spam get whitelisted? IA IA IA IA IA IA Here is the Declude header, although I can’t figure out why the country chain is blank. IA IA IA IA IA X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA X-Declude-Spoolname: D8baa03aac020.smd IA X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA http://www.declude.com/x-note.htm; IA X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA X-Country-Chain: IA IA IA Thanks, IA IA IA IA IA IA Ben IA --- This E-mail came from the Declude.JunkMail mailing list. To IA unsubscribe, just send an E-mail to imail...@declude.com, and type IA unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] abused whitelist?
Hi, aha! Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 7:53:29 PM, you wrote: DC Hi Andy, DC He sent it to the Declude Junkmail list, of which you are a member. DC However, the list is pretty much defunct. Declude switched to online forums DC years ago, which effectively killed the list. DC Darin. DC -Original Message- DC From: andyb@thumpernet DC Sent: Monday, October 22, 2012 6:03 PM DC To: Declude.JunkMail@declude.com DC Subject: Re: [Declude.JunkMail] abused whitelist? DC Hi, DC I think you're sending this to the wrong place. Who/what company are DC you looking for? DC Thanks, DC Andrew Baldwin DC an...@thumpernet.com DC an...@thumpernet.com DC 315-277-0685 DC Monday, October 22, 2012, 2:54:29 PM, you wrote: IA IA IA IA IA IA Hi, IA IA IA IA IA IA We have a client that is getting bounced spams. When I check IA the header, it looks like they’re being whitelisted through IA Declude. I checked the whitelisting settings and only have IA “whitelist auth” (autowhitelist is off). Does this mean their IA account is hacked? How else could the spam get whitelisted? IA IA IA IA IA IA Here is the Declude header, although I can’t figure out why the country DC chain is blank. IA IA IA IA IA X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA X-Declude-Spoolname: D8baa03aac020.smd IA X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA http://www.declude.com/x-note.htm; IA X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA X-Country-Chain: IA IA IA Thanks, IA IA IA IA IA IA Ben IA --- This E-mail came from the Declude.JunkMail mailing list. To IA unsubscribe, just send an E-mail to imail...@declude.com, and type IA unsubscribe Declude.JunkMail. The archives can be found at DC http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] abused whitelist?
Hey fellas, the list is still here, just not very active. I apologize for the delay in my response, Ben. It looks like you may have a compromised account on your server. Do you have a Declude service agreement? If yes, I will be happy to have a look at your server and let you know for sure. If not, you can enable Declude Hijack which is a part of your Declude suite and it should catch the emails being sent from the compromised account. Thanks. From: andyb@thumpernet an...@thumpernet.com Sent: Monday, October 22, 2012 8:33 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] abused whitelist? Hi, aha! Thanks, Andrew Baldwin an...@thumpernet.com an...@thumpernet.com 315-277-0685 Monday, October 22, 2012, 7:53:29 PM, you wrote: DC Hi Andy, DC He sent it to the Declude Junkmail list, of which you are a member. DC However, the list is pretty much defunct. Declude switched to online forums DC years ago, which effectively killed the list. DC Darin. DC -Original Message- DC From: andyb@thumpernet DC Sent: Monday, October 22, 2012 6:03 PM DC To: Declude.JunkMail@declude.com DC Subject: Re: [Declude.JunkMail] abused whitelist? DC Hi, DC I think you're sending this to the wrong place. Who/what company are DC you looking for? DC Thanks, DC Andrew Baldwin DC an...@thumpernet.com DC an...@thumpernet.com DC 315-277-0685 DC Monday, October 22, 2012, 2:54:29 PM, you wrote: IA IA IA IA IA IA Hi, IA IA IA IA IA IA We have a client that is getting bounced spams. When I check IA the header, it looks like they're being whitelisted through IA Declude. I checked the whitelisting settings and only have IA whitelist auth (autowhitelist is off). Does this mean their IA account is hacked? How else could the spam get whitelisted? IA IA IA IA IA IA Here is the Declude header, although I can't figure out why the country DC chain is blank. IA IA IA IA IA X-Declude-Sender: off...@somedomain.com [190.0.103.59] IA X-Declude-Spoolname: D8baa03aac020.smd IA X-Declude-Note: Scanned by Declude 4.2.20 for spam. IA http://www.declude.com/x-note.htm; IA X-Declude-Scan: Score [0] at 11:09:02 on 22 Oct 2012 IA X-Declude-Fail: Whitelisted, ZEROHOUR [0] IA X-Country-Chain: IA IA IA Thanks, IA IA IA IA IA IA Ben IA --- This E-mail came from the Declude.JunkMail mailing list. To IA unsubscribe, just send an E-mail to imail...@declude.com, and type IA unsubscribe Declude.JunkMail. The archives can be found at DC http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. DC --- DC This E-mail came from the Declude.JunkMail mailing list. To DC unsubscribe, just send an E-mail to imail...@declude.com, and DC type unsubscribe Declude.JunkMail. The archives can be found DC at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
