Did you take a look at the headers of one of the E-mails that someone
received?  Most likely, it wasn't even sent from your server.  In most
cases, it is extremely difficult or impossible to do anything about this
problem (called a "joe job").  Note that it is very difficult for a spammer
to forge your IP (difficult enough that they would likely have chosen your
IP intentionally, if you got them really upset, for example).

Actually, if you took a look at the URL you displayed above, you would get
to http://spews.org/html/S1199.html which shows that those spammers did NOT
use your IP at all!  They used 209.164.21.122, which is close to your IP.

>>  Thanks all for the suggestions/comments regarding spammer impersonation.
Unfortunately, I don't have any e-mails from this company - but they are
listed in many black/spam lists as a spammer. Guess it's quasi "guilt by
association" since the IP's are so close together. Not going to post to
Google - don't think that would do much good. But will be more aggressive
with my ISP (XO) regarding our removal from the blacklist.

What is "interesting" is the reported Netblock: 209.164.0.0 -
209.164.63.255. When using the whois at geektools
(http://whois.geektools.com/cgi-bin/proxy.cgi), it shows this:

Netname: DELTANET-BLK-1
Netblock: 209.164.0.0 - 209.164.63.255
Maintainer: DISI

How could they have such a large range of IPs?

Any further suggestions welcome!

Thanks again,

Bruce


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to