Actually, if you use MailScanner, you can watermark all messages originating at your server and toast any "undeliverables" that do not have the watermark. It works like a charm.
Terry ----- Original Message ----- From: "Robert West" <[email protected]> To: <[email protected]>; "'WISPA General List'" <[email protected]> Sent: Thursday, April 08, 2010 8:11 AM Subject: Re: [WISPA] email issues > We had a lot of that in the past. It wasn't that their email was > hijacked, > it was just that the spam bot was using our domain extension with random > names as a return address. When the spam was sent to an invalid email > address, it was then bounced back to us since it was the return email. > > As Stuart said, not too much you can do except wait for it to go away. > > Bob- > > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of Stuart Pierce > Sent: Thursday, April 08, 2010 8:21 AM > To: WISPA General List > Subject: Re: [WISPA] email issues > > I've had that happen to myself and to a couple of clients and just like a > virus we had to let it run it's course. However we did put in a filter > rule > to delete any undeliverables. > > ---------- Original Message ---------------------------------- > From: RickG <[email protected]> > Reply-To: WISPA General List <[email protected]> > Date: Wed, 7 Apr 2010 22:17:27 -0400 > >>I've got a client whose email ([email protected]) appears to have >>been hijacked for spamming purposes. I'm not sure what to do about it. >>Sample email below. Any ideas? Thanks in advance! -RickG >> >>*********************************************** >> >>From: <[email protected]> >>To: <[email protected]> >>Sent: Wednesday, April 07, 2010 8:50 PM >>Subject: Delivery failure >> >> >>> Message from yahoo.co.jp. >>> Unable to deliver message to the following address(es). >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be > delivered. >>> This account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. This >>> account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. This >>> account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> This user doesn't have a yahoo.co.jp account ([email protected]) [-5] >>> >>> <[email protected]>: >>> This user doesn't have a yahoo.co.jp account >>> ([email protected]) [-101] >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. This >>> account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. > This >>> account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. >>> This >>> account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. This >>> account has been disabled or discontinued [#102]. >>> >>> <[email protected]>: >>> Sorry your message to [email protected] cannot be delivered. This >>> account has been disabled or discontinued [#102]. >>> >>> --- Original message follows. >>> >>> X-YahooFilteredBulk: 190.253.243.200 >>> X-Originating-IP: [190.253.243.200] >>> Return-Path: <[email protected]> >>> Received-SPF: none ([190.253.243.200]: domain of [email protected] does >>> not designate permitted sender hosts) >>> Authentication-Results: mta307.mail.ogk.yahoo.co.jp from=kywifi.com; >>> domainkeys=neutral (no sig) >>> Received: from 190.253.243.200 (EHLO 190.253.243.200) (190.253.243.200) >>> by mta307.mail.ogk.yahoo.co.jp with SMTP; Thu, 08 Apr 2010 09:43:27 > +0900 >>> Received: from [221.6.75.79] (helo=wxtzlmdpwyl.macfszutaxwyb.org) >>> by with esmtpa (Exim 4.69) >>> (envelope-from ) >>> id 1MMHK8-2919sz-YH >>> for [email protected]; Wed, 7 Apr 2010 19:43:25 -0500 >>> From: "Major Madrid" <[email protected]> >>> To: <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]>, >>> <[email protected]> >>> Subject: Re: Please, conflrm you receipt >>> Date: Wed, 7 Apr 2010 19:43:25 -0500 >>> MIME-Version: 1.0 >>> Content-Type: multipart/alternative; >>> boundary="----=_aywkmxl_77_88_20" >>> X-Priority: 3 >>> X-Mailer: iiparxz_54 >>> Message-ID: >>> <[email protected]> >>> >>> ------=_aywkmxl_77_88_20 >>> Content-Type: text/plain; >>> charset="iso-8859-2" >>> Content-Transfer-Encoding: quoted-printable >>> >>> Express Chemist PharmacyBuy non-prescription treatmentsonline. Discreet. > = >>> UK & US registered. >>> ------=_aywkmxl_77_88_20 >>> Content-Type: text/html; >>> charset="iso-8859-2" >>> Content-Transfer-Encoding: quoted-printable >>> >>> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> >>> <HTML><HEAD> >>> <META http-equiv=3DContent-Type content=3D"text/html; > charset=3Diso-8859-= >>> 2"> >>> <STYLE></STYLE> >>> </HEAD> >>> <BODY> >>> <h1><font size=3D"3">Express Chemist Pharmacy</font></h1> >>> >>> <font size=3D"3"><a href=3D"http://housewares04.spaces.live.com";>Buy</a> > = >>> non-prescription treatments >>> <a href=3D"http://survival65.spaces.live.com";>online</a>. Discreet. UK & > = >>> US registered.</font> >>> </BODY></HTML> >>> >>> ------=_aywkmxl_77_88_20-- >>> >>> >>> *** MESSAGE TRUNCATED *** >> >> >>--------------------------------------------------------------------------- > ----- >>WISPA Wants You! Join today! >>http://signup.wispa.org/ >>--------------------------------------------------------------------------- > ----- >> >>WISPA Wireless List: [email protected] >> >>Subscribe/Unsubscribe: >>http://lists.wispa.org/mailman/listinfo/wireless >> >>Archives: http://lists.wispa.org/pipermail/wireless/ >> > > > > > > ________________________________________________________________ > Sent via the WebMail system at avolve.net > > > > > > > ---------------------------------------------------------------------------- > ---- > WISPA Wants You! Join today! > http://signup.wispa.org/ > ---------------------------------------------------------------------------- > ---- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ > > > > -------------------------------------------------------------------------------- > WISPA Wants You! Join today! > http://signup.wispa.org/ > -------------------------------------------------------------------------------- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: [email protected] Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
