RE: SPAM relay

[William Lefkovics]

Title: Message

Sorry... mine was not a useful response.  It was only intended to return another message rejected email from a Scanmail infected server.

 

There are developers that are coding RBL's for Exchange 2000 using event sinks, right Siegfried?

-----Original Message-----
From: Richard McMahon [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 3:01 AM
To: MS-Exchange Admin Issues
Subject: RE: SPAM relay

Thanks for the responses,

Talking about spam what is the best thing to use to filter this stuff out.  Either on keyword or domain.  I have looked at the realtime black hole list but it seems to only really work with sendmail or some other non exchange mail server.  I currently run exchange 5.5 sp4 any suggestions/comments on what packages are good or should be avoided.

Richard

-----Original Message-----
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: 18 June 2002 10:51
To: MS-Exchange Admin Issues
Subject: RE: SPAM relay

Friggin' damn yahoo bastards.  Speaking of bastards, my newest rule
forwards Scanmail quarantine message rejection notices from bmc.com to
several addresses found on their site.

-----Original Message-----
From: Marty Richards [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 2:42 AM
To: MS-Exchange Admin Issues
Subject: RE: SPAM relay

Hi Richard,
 
Most likely its a misaddressed spam - your mail server is trying to
return it to the "@yahoo" originator as unknown recipient. Probably the
yahoo account never existed (headers are easily forged) or Yahoo have
disactivated it due to the spammout.
 
That message is a yahoo standard for bouncing spam cases - they probably
have a different message for open relays ;)
 
Just for interest, if Yahoo are in the practice of suspending
spam-associated mail accounts, what would stop anyone forging a mail out
on behalf of any yahoo user and suspending the account? *shrug* I guess
this is a problem with SMTP really, as there is no authentication.
 
Cheers,
Marty

-----Original Message-----
From: Richard McMahon [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 7:24 PM
To: MS-Exchange Admin Issues
Subject: SPAM relay

Hi folks  I just want to run this past you all. 

I have two servers connected to the internet.  Both have been sending
this message

The following recipients did not receive the attached mail. Reasons are
listed with each recipient:

<[EMAIL PROTECTED]> [EMAIL PROTECTED]
        MSEXCH:IMS:Appropria:US-Pleasanton:BOWMORE 3553 (000B09B6) 553
VS10-RT Possible forgery or deactivated due to abuse - see
http://help.yahoo.com/help/us/mail/spam/spam-18.html
<http://help.yahoo.com/help/us/mail/spam/spam-18.html>  (#5.1.1)

The message that caused this notification was:

I have (as far as I know) configured the servers to stop relaying and I
do get relaying denied messages when I test it.

Anyone know whether I should be worrying about this message?

Richard

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm