Re: spam spoofers

2004-05-11 Thread Peter Risdon
Greg 'groggy' Lehey wrote:

I also have a woman getting mail from a sick person with the address
and return the same as her address. the police, FBI, are no help..
   

That may change.
 

You probably know this already, but Received headers are your friend.

PWR.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: spam spoofers

2004-05-11 Thread Greg 'groggy' Lehey
On Tuesday, 11 May 2004 at  9:34:25 -0700, [EMAIL PROTECTED] wrote:
>
> I am getting hundreds of spam with return addresses on it from MY server..
> the ip addresses are different and they didn't originate from my server .
> now I am getting notices from AOL and other they are going to stop
> excepting mail from me...while this is no loss to me, I see a problem
> here...  is there anyway to stop this, anyone to callanything to do?

Spam's a universal problem, of course, and it'll be a while before the
legislators catch up, though things are gradually happening.  This
particular issue is forgery, of course; I don't have much hope, but I
have an AUP which attaches a charge of $25,000 per use of our name.  I
don't see a bat's chance in hell of seeing that money at the moment,
but who knows what happens in the future?  See
http://www.lemis.com/aup.html for more details.

Another thing you can try is SPF, the sender policy framework.  It's a
DNS extension that says where mail from you can come from.  See
http://spf.pobox.com/ for more details.  AOL is using it:

aol.com text = "v=spf1 ip4:152.163.225.0/24 ip4:205.188.139.0/24 ip4:205.188.144.0/24 
ip4:205.188.156.0/23 ip4:205.188.159.0/24 ip4:64.12.136.0/23 ip4:64.12.138.0/24 
ptr:mx.aol.com ?all"

I suspect that they would not block you if you have SPF DNS records.

> I also have a woman getting mail from a sick person with the address
> and return the same as her address. the police, FBI, are no help..

That may change.

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
Note: I discard all HTML mail unseen.
Finger [EMAIL PROTECTED] for PGP public key.
See complete headers for address and phone numbers.


pgp0.pgp
Description: PGP signature


RE: spam spoofers

2004-05-11 Thread Buck
I am running my mail server.  I have notified the ISP's and thanks for the
term I was looking for joe-job

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Gary
Sent: Tuesday, May 11, 2004 10:00 AM
To: [EMAIL PROTECTED]
Cc: Freebsd-Questions
Subject: Re: spam spoofers


On Tue, May 11, 2004 at 09:34:25AM -0700 or thereabouts, [EMAIL PROTECTED]
wrote:
>
> I am getting hundreds of spam with return addresses on it from MY server..
> the ip addresses are different and they didn't originate from my server .
> now I am getting notices from AOL and other they are going to stop
> excepting mail from me...while this is no loss to me, I see a problem
> here...  is there anyway to stop this, anyone to callanything to do?

you neglected to add basic info, as... do you run your own mail server, or
do you go through your ISP?  In any event, if they did not originate from
your computer/server, you are the victim of a joe-job, google for it.
There is nothing really you can do, except to notify the ISPs IP addresses
where the spam is originating from..

> I also have a woman getting mail from a sick person with the address and
> return the same as her address. the police, FBI, are no help..

so, give her a new email address, and cancel the old one, and notify the
ISP of the IP address where the "sick person" is coming from. .

--
Gary

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: spam spoofers

2004-05-11 Thread Gary
On Tue, May 11, 2004 at 09:34:25AM -0700 or thereabouts, [EMAIL PROTECTED] wrote:
> 
> I am getting hundreds of spam with return addresses on it from MY server..
> the ip addresses are different and they didn't originate from my server .
> now I am getting notices from AOL and other they are going to stop
> excepting mail from me...while this is no loss to me, I see a problem
> here...  is there anyway to stop this, anyone to callanything to do?

you neglected to add basic info, as... do you run your own mail server, or
do you go through your ISP?  In any event, if they did not originate from
your computer/server, you are the victim of a joe-job, google for it.
There is nothing really you can do, except to notify the ISPs IP addresses
where the spam is originating from.. 

> I also have a woman getting mail from a sick person with the address and
> return the same as her address. the police, FBI, are no help..

so, give her a new email address, and cancel the old one, and notify the
ISP of the IP address where the "sick person" is coming from. . 

-- 
Gary

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


spam spoofers

2004-05-11 Thread Buck

I am getting hundreds of spam with return addresses on it from MY server..
the ip addresses are different and they didn't originate from my server .
now I am getting notices from AOL and other they are going to stop
excepting mail from me...while this is no loss to me, I see a problem
here...  is there anyway to stop this, anyone to callanything to do?

I also have a woman getting mail from a sick person with the address and
return the same as her address. the police, FBI, are no help..


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"