I'm glad that I'm not the only one with these problems! Not that I like having the problem, but I thought there must be some kind of undetectable Trojan on my system letting the spammers know when I add a domain or user. Misery like company I guess.
I did happen to talk to DigiHost yesterday and was told that they don't have any real spam filter, but they do have something in place that prevents dictionary attacks. I'm NOT an expert in this field but he was saying that they only allow 10 attempts so the dictionary attacks don't work. Is there a way to make JunkMail do such a thing? (I really don't even know what I'm asking about here, but hopefully someone else will). -Joe ----- Original Message ----- From: "Richard Farris" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 05, 2004 12:27 PM Subject: Re: [Declude.JunkMail] How do they do it? > I had the exact same thing happen to me about 5 months ago..we moved our > servers to a new location and changed IPs on everything...the spam filter > broke because I needed a new key for it to work..it was only down about 24 > hrs...and I got bombarded during those hours..but I have been fighting spam > more aggressively ever since...and my customers noticed a big change also.. > My upline provider offered to put their spam filter (Sublinme) in front of > mine and all that seemed to do is put less work on my server but the spam is > still worse than before I made the move...and all that changed were the > IPs..same Declude...same Sortmonster...same everything...I have been racking > my brain ever since to figure out why? > > Richard Farris > Ethixs Online > 1.270.247.5555 Office > 1.800.548.3877 Tech Support > > ----- Original Message ----- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, February 05, 2004 9:16 AM > Subject: Re: [Declude.JunkMail] How do they do it? > > > > > > >I've had two cases recently where I had hosting customers move their > email > > >services to my Imail/Declude box. Both moved from a national hosting > > >company and had no spam protection of any kind on their services. Both > > >complained within a week of the move that they're getting bombarded by > spam. > > >Both claim that they didn't receive much spam on their old host. One had > a > > >mail archive that I was able to look at and there really wan't much in > the > > >way of spam in there. > > > > The only thing that I can think of is that the spammers have access to the > > zone files (which list all the domains in a TLD and their NS records), and > > are looking for changes in the NS records, and targeting those domains. > > > > Are the spams going to valid user accounts? Is this a dictionary > > attack? My guess is that the hosting company was indeed filtering spam. > > > > >How is it that these spammers are hitting these domains when they move to > my > > >box? I have JunkMail pretty well configured (I think) and they still get > > >more spam than they did before the move. Doesn't make sense to me. > > > > Could you send me the full headers of several spams that are getting > > through? I may be able to get a better idea of what is happening. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > > since 2000. > > Declude Virus: Catches known viruses and is the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
