spam

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
jayrobb
New user
New user
Posts: 9
Joined: 2006-10-20 03:29
Location: Indiana
Contact:

spam

Post by jayrobb » 2006-10-23 05:21

hello,

I am still testing ny new install of hmailserver, also still learning the spam setting..

before I turned them on I got all my mail boxes full of spam with no from address
the headers first looked liked they came from my IP address...
any one know anything about this?
They all say
AMAZING...

email advertise like this to 8,000,000 people this week for free..

http://www.broadcastemailingagency.com/





the above noncommercial offer is only for noncommercial
charities only. press on charity info on our web site for full
and complete details. this offer is not a commercial service
and is not at all for sale or lease or trade of any kind...
:-)

^DooM^
Site Admin
Posts: 13861
Joined: 2005-07-29 16:18
Location: UK

Post by ^DooM^ » 2006-10-23 10:29

Hi Jayrobb,

If you post the header we will be better able to say where the email comes from.

Make sure to post the full header though.

Cheers!

jayrobb
New user
New user
Posts: 9
Joined: 2006-10-20 03:29
Location: Indiana
Contact:

Post by jayrobb » 2006-10-23 21:27

here is one, had one before that said received from my own ip, this one is different... thanks
I ask here because I did not get this type of spam untill I started using hmail so I am looking for the leak....

Return-Path: <billing@jaysnet.us>
Received: from 201-27-144-46.dsl.telesp.net.br ([201.27.144.46])
by jaysnet.us
with hMailServer ; Mon, 23 Oct 2006 15:08:34 -0400
Message-ID: <EE9B6C92-7889-420A-83D2-E3C176BD4632@jaysnet.us>
To: billing@jaysnet.us
X-Antivirus: avast! (VPS 0643-1, 23/10/2006), Outbound message
X-Antivirus-Status: Clean
:-)

User avatar
martin
Developer
Developer
Posts: 6837
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Post by martin » 2006-10-23 21:40

It's probably easier if you post one of those messages you think came from your own IP address. I don't think anyone here is going to be able you just by seeing a spam message..

Have you run any open relay tests?
http://www.hmailserver.com/documentatio ... elay_tests

northernsoul
New user
New user
Posts: 4
Joined: 2006-10-03 18:06
Location: GB

Post by northernsoul » 2006-10-27 17:10

I receive lots of these but only with a catch all email address. If this feature is turned on might be why you are receiving them now when you never used to.

jayrobb
New user
New user
Posts: 9
Joined: 2006-10-20 03:29
Location: Indiana
Contact:

Post by jayrobb » 2006-11-14 19:35

how did they do this? my ip is 75.38.101.82

and yes I have been using catch all email even before runing hMailServer
I would use the site name I am giving my address to before the @
this way I know who sell my address and I can :blackhole:
when needed,, now with the ease of alies I am setting them up now so soon wont need catch all address.



Return-Path: <help@jaysop.com>
Received: from 75.38.101.82 ([221.126.140.38])
by jaysnet.us
with hMailServer ; Tue, 14 Nov 2006 10:36:59 -0500
Message-ID: <7B3195D3-C211-4D4D-8716-9FB0B27A6480@jaysnet.us>
To: help@jaysop.com
christmas is coming...

email advertise like this to 8,000,000 people this week for free..

http://www.emailadvertisinginc.com/





the above noncommercial offer is only for noncommercial
charities only. press on charity info on our web site for full
and complete details. this offer is not a commercial service
and is not at all for sale or lease or trade of any kind.
:-)

User avatar
dzekas
Senior user
Senior user
Posts: 2486
Joined: 2005-10-13 21:28
Location: Lithuania

Post by dzekas » 2006-11-14 20:04

Both addresses are listed in dynamic ip blacklists and in CBL.
http://www.dnsstuff.com/tools/ip4r.ch?ip=201.27.144.46
http://www.dnsstuff.com/tools/ip4r.ch?ip=221.126.140.38

Turn on basic RBL filtering, publish your SPF records and turn on SPF filtering in hMailServer.

cveillon
Normal user
Normal user
Posts: 88
Joined: 2006-01-31 23:56
Location: Roy, UT USA

Post by cveillon » 2006-11-14 23:35

I would also uncheck "Allow empty sender address" under settings, protocols, SMTP, RFC Compliance (tab).

Also turn on/enable SURBL filtering.

These along with dzekas' suggestions should help quite a bit. :)

Chuck

User avatar
martin
Developer
Developer
Posts: 6837
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Post by martin » 2006-11-14 23:37

I suggest you keep "Allow empty sender address" selected. If you de-select this, you won't be able to receive some bounce messages, auto-replies from other servers might not always work.

Also, some email won't accept email from you if you de-select this option. :-\

^DooM^
Site Admin
Posts: 13861
Joined: 2005-07-29 16:18
Location: UK

Post by ^DooM^ » 2006-11-14 23:58

martin wrote:Also, some email won't accept email from you if you de-select this option. :-\
Yep paypal is one of those if i remember correctly.
If at first you don't succeed, bomb disposal probably isn't for you! ヅ

dirkomatic
New user
New user
Posts: 4
Joined: 2006-11-09 06:36

Post by dirkomatic » 2006-11-15 00:11

I just found out that Verizon users can't get mail if that is unchecked as well...

Post Reply