The Glade 4.0
https://gladerebooted.net/

Dear Email Spammers,
https://gladerebooted.net/viewtopic.php?f=7&t=10576
Page 1 of 1

Author:  Midgen [ Mon Nov 18, 2013 8:10 pm ]
Post subject:  Dear Email Spammers,

Image

Author:  Rorinthas [ Mon Nov 18, 2013 10:34 pm ]
Post subject:  Re: Dear Email Spammers,

Ill take "Welcome to the Internet , you must be new here" for $100, Alex.

Author:  Midgen [ Tue Nov 19, 2013 3:08 am ]
Post subject: 

Rorinthas wrote:
Ill take "Welcome to the Internet , you must be new here" for $100, Alex.


*sigh :?

I've been dealing with the general asininery of email spam successfully for a long time.. longer than I've been on this board.

The particular situation I'm dealing with now is supremely frustrating...

Spammers are sending their emails with a spoofed source email address (MINE!), which results in me getting thousands upon thousands of MAILER-REPLY/Undeliverable/GO-TO-HELL-DO-NOT-PASS-GO reply messages....

It's an email address that I use for the majority of my online purchases (Amazon order receipts, etc...).

There really isn't anything I can do about it, other than to abandon the address and have it added to a blacklist.

Doing that, I risk losing the entire domain, which many of my family members have active mailboxes on.

This happened once before with the same address, but eventually stopped when one of the big euro spam houses was shut down. I suspect one of their old lists is actively being used again.

Author:  Rorinthas [ Tue Nov 19, 2013 6:34 am ]
Post subject:  Re: Dear Email Spammers,

Well that is kind of different. As long a you don't send a lot of undeliverable mail yourself you could put in a rule that would send those emails to a certain folder.

Author:  shuyung [ Tue Nov 19, 2013 9:56 am ]
Post subject: 

Ah, joejobbing.

Author:  Midgen [ Tue Nov 19, 2013 4:24 pm ]
Post subject:  Re:

shuyung wrote:
Ah, joejobbing.


Vad betyder det här?

Author:  shuyung [ Tue Nov 19, 2013 4:53 pm ]
Post subject: 

You've been dealing with the general assininery of email spam successfully for a long time, but you don't know what a joe job is?
1+1=3

Author:  Taskiss [ Tue Nov 19, 2013 7:05 pm ]
Post subject:  Re: Dear Email Spammers,

I've been in systems administration in one form or another since the late 70's and never heard of a "joe job".

Author:  shuyung [ Tue Nov 19, 2013 7:51 pm ]
Post subject: 

The eponymous joe job was in 1997, so I guess we have a demarcation point for when you ceased learning new things.

Author:  Müs [ Tue Nov 19, 2013 8:27 pm ]
Post subject:  Re: Dear Email Spammers,

Taskiss wrote:
I've been in systems administration in one form or another since the late 70's and never heard of a "joe job".


I've been in IT since the late 90's, and have never heard the term either.

Author:  Lenas [ Tue Nov 19, 2013 9:30 pm ]
Post subject:  Re: Dear Email Spammers,

http://appletreemediaworks.com/blog/201 ... a-joe-job/

Author:  Midgen [ Tue Nov 19, 2013 9:40 pm ]
Post subject: 

i can honestly say I've never heard that term.

Here is some more info on the terms origin.
http://en.wikipedia.org/wiki/Joe_job

Edit:
In my case, I'm not being personally attacked. They are just using random From addresses to dilute the heuristics of the spam filters, and my address is on the list.

I suspect this happened when I purchased a Raspberry Pi from Alibaba. I don't usually use my 'primary' email addresses for questionable sites. I have throwaway/catchall mailboxes I usually use for this. Lesson learned...

The emails that are going out using my email address (with someone else's proper name) contain a variety of things.... primarily links to phishing sites, and the occasional infected download.

Sadly, there really isn't anything I can do about it, other than migrate all of my legitimate email off it it and have it blacklisted (or just ignore it and let it fill up).

Author:  Stathol [ Wed Nov 20, 2013 4:08 pm ]
Post subject: 

What you're dealing with is backscatter. Well-structured spam filters either reject the message outright at delivery time or else silently drop the message. Badly written spam filters use accept-and-bounce, which spews NDRs to innocent bystanders.

Obviously you can't fix other people's broken spam filters, but you can set an SPF record for your domain with a hardfail (FAIL) default for non-matching clients. That is, make the rule end with "-all". This will give other people's spam filters absolute certainty that the emails in question are fraudulent (unless they really do originate from your mail servers). Hopefully that will kick the message into a more severe filtering category that gets rejected or silently dropped instead of mindlessly backscattered.

Author:  Midgen [ Wed Nov 20, 2013 4:47 pm ]
Post subject: 

I only examined a few of the headers, but they were all over the map. The Spammers are using a series of open relays to further obscure their origin.

The domain is currently hosted with a large hosting company, and some percentage (not sure how much) is originating from their own servers. I have zero control over the mail server configurations.

My current tack is to ignore it and hope it goes away, while I'm slowing migrating the site registrations to a different address.

Author:  Stathol [ Wed Nov 20, 2013 7:54 pm ]
Post subject: 

Do you have control over the domain registration? Most DNS hosts will let you create an SPF record and/or a custom TXT record. SPF can use either. This doesn't have anything to do with the mail server configuration -- it's basically just the inverse of an MX record.

Author:  Midgen [ Wed Nov 20, 2013 10:15 pm ]
Post subject:  Re:

Stathol wrote:
Do you have control over the domain registration? Most DNS hosts will let you create an SPF record and/or a custom TXT record. SPF can use either. This doesn't have anything to do with the mail server configuration -- it's basically just the inverse of an MX record.


Thanks Stathol... unfortunately I don't. This is just a personal mailbox (although one I've been using for years).

I went through today and changed most my registered email addresses (the ones I care about anyway) to a different mailbox on a different domain (on a different hosting provider). I'll get the rest of them as I come across them.

/meh

Page 1 of 1 All times are UTC - 6 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/