spam

jayrobb · Post by **jayrobb** » 2006-10-23 05:21

hello,

I am still testing ny new install of hmailserver, also still learning the spam setting..

before I turned them on I got all my mail boxes full of spam with no from address
the headers first looked liked they came from my IP address...
any one know anything about this?
They all say

AMAZING...

email advertise like this to 8,000,000 people this week for free..

http://www.broadcastemailingagency.com/

the above noncommercial offer is only for noncommercial
charities only. press on charity info on our web site for full
and complete details. this offer is not a commercial service
and is not at all for sale or lease or trade of any kind...

^DooM^ · Post by **^DooM^** » 2006-10-23 10:29

Hi Jayrobb,

If you post the header we will be better able to say where the email comes from.

Make sure to post the full header though.

Cheers!

jayrobb · Post by **jayrobb** » 2006-10-23 21:27

here is one, had one before that said received from my own ip, this one is different... thanks
I ask here because I did not get this type of spam untill I started using hmail so I am looking for the leak....

Return-Path: <billing@jaysnet.us>
Received: from 201-27-144-46.dsl.telesp.net.br ([201.27.144.46])
by jaysnet.us
with hMailServer ; Mon, 23 Oct 2006 15:08:34 -0400
Message-ID: <EE9B6C92-7889-420A-83D2-E3C176BD4632@jaysnet.us>
To: billing@jaysnet.us
X-Antivirus: avast! (VPS 0643-1, 23/10/2006), Outbound message
X-Antivirus-Status: Clean

Post by **martin** » 2006-10-23 21:40

It's probably easier if you post one of those messages you think came from your own IP address. I don't think anyone here is going to be able you just by seeing a spam message..

Have you run any open relay tests?
http://www.hmailserver.com/documentatio ... elay_tests

northernsoul · Post by **northernsoul** » 2006-10-27 17:10

I receive lots of these but only with a catch all email address. If this feature is turned on might be why you are receiving them now when you never used to.

jayrobb · Post by **jayrobb** » 2006-11-14 19:35

how did they do this? my ip is 75.38.101.82

and yes I have been using catch all email even before runing hMailServer
I would use the site name I am giving my address to before the @
this way I know who sell my address and I can :blackhole:
when needed,, now with the ease of alies I am setting them up now so soon wont need catch all address.

Return-Path: <help@jaysop.com>
Received: from 75.38.101.82 ([221.126.140.38])
by jaysnet.us
with hMailServer ; Tue, 14 Nov 2006 10:36:59 -0500
Message-ID: <7B3195D3-C211-4D4D-8716-9FB0B27A6480@jaysnet.us>
To: help@jaysop.com

christmas is coming...

email advertise like this to 8,000,000 people this week for free..

http://www.emailadvertisinginc.com/

the above noncommercial offer is only for noncommercial
charities only. press on charity info on our web site for full
and complete details. this offer is not a commercial service
and is not at all for sale or lease or trade of any kind.

dzekas · Post by **dzekas** » 2006-11-14 20:04

Both addresses are listed in dynamic ip blacklists and in CBL.
http://www.dnsstuff.com/tools/ip4r.ch?ip=201.27.144.46
http://www.dnsstuff.com/tools/ip4r.ch?ip=221.126.140.38

Turn on basic RBL filtering, publish your SPF records and turn on SPF filtering in hMailServer.

cveillon · Post by **cveillon** » 2006-11-14 23:35

I would also uncheck "Allow empty sender address" under settings, protocols, SMTP, RFC Compliance (tab).

Also turn on/enable SURBL filtering.

These along with dzekas' suggestions should help quite a bit.

Chuck

Post by **martin** » 2006-11-14 23:37

I suggest you keep "Allow empty sender address" selected. If you de-select this, you won't be able to receive some bounce messages, auto-replies from other servers might not always work.

Also, some email won't accept email from you if you de-select this option. :-\

^DooM^ · Post by **^DooM^** » 2006-11-14 23:58

martin wrote:Also, some email won't accept email from you if you de-select this option. :-\

Yep paypal is one of those if i remember correctly.

dirkomatic · Post by **dirkomatic** » 2006-11-15 00:11

I just found out that Verizon users can't get mail if that is unchecked as well...