Re: [mailop] Yahoo! FBL feedback dropped

[Jonathan Leist]

Does the signing differ between your bulk and transactional mail?

If I remember correctly, we ran into an issue with double-signing, where
our users' header-from aligned signature was given priority over our
signature, which was the one we were using for their FBL.

On Aug 4, 2017 4:38 PM, "Torsten Reinert via mailop" 
wrote:

Hey,

Does anyone else experience drops in Yahoo! FBL complaints?

We are no longer receiving the FBL feed for our commercial emails while our
transactional traffic continues to receive FBL traffic (both sent via the
same domain but different addresses).

Since the FBL is domain-based this seemed odd considering the domain(s)
across batch and transactional are the same.

Thanks,
Torsten



*Torsten Reinert*

Global Deliverability Manager


Email: tors...@groupon.com

Groupon Inc. | www.groupon.com



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Talos Blocklist?

[TR Shaw]

Chris

curl -L https://talosintelligence.com/documents/ip-blacklist -o 
talos-ip-blacklist

Tom

> On Aug 4, 2017, at 4:44 PM, Chris Boyd  wrote:
> 
> 
>> On Aug 4, 2017, at 3:23 PM, Eric Tykwinski  wrote:
>> 
>> I use it for hosts.deny, so a bit of everything...
> 
> Good idea.  How do you download it? Looks like the web developers had their 
> way with it, so you have to download a small pile of javascript just to get 
> the URL on S3 :-(
> 
> —Chris
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Talos Blocklist?

[Don Owens]

That list is made for open source Snort users to demonstrate the IP blocking 
capability of the open source engine.  It's a small subset of the master list 
used for the commercial side of things. While useful, it's a very small subset, 
so it may change up quite a bit, due to sampling. So don't expect it to catch 
everything ;)

./don



> On Aug 4, 2017, at 12:42, Chris Boyd  wrote:
> 
> Just noticed that Talos Intelligence is now publishing—every 15 minutes—a 
> downloadable block list on their web site at 
> 
> https://talosintelligence.com/documents/ip-blacklist
> 
> Anyone used it for anti-spam?
> 
> —Chris
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Talos Blocklist?

[Chris Boyd]

> On Aug 4, 2017, at 3:23 PM, Eric Tykwinski  wrote:
> 
> I use it for hosts.deny, so a bit of everything...

Good idea.  How do you download it? Looks like the web developers had their way 
with it, so you have to download a small pile of javascript just to get the URL 
on S3 :-(

—Chris
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Talos Blocklist?

[Eric Tykwinski]

I use it for hosts.deny, so a bit of everything...

Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300

> -Original Message-
> From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Chris Boyd
> Sent: Friday, August 04, 2017 3:43 PM
> To: mailop
> Subject: [mailop] Talos Blocklist?
> 
> Just noticed that Talos Intelligence is now publishing—every 15 minutes—a
> downloadable block list on their web site at
> 
> https://talosintelligence.com/documents/ip-blacklist
> 
> Anyone used it for anti-spam?
> 
> —Chris
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Talos Blocklist?

[Chris Boyd]

Just noticed that Talos Intelligence is now publishing—every 15 minutes—a 
downloadable block list on their web site at 

https://talosintelligence.com/documents/ip-blacklist

Anyone used it for anti-spam?

—Chris


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Any One on here doing business with Rediffpro?

[Michael Peddemors]

Ransom ware outbreak, but wondering why they aren't generating RFC 
compliant headers..

Unless of course, the operating system there is compromised.

Return-Path: 
Received: from smtp.rediffmailpro.com (HELO smtp.rediffmailpro.com) 
(122.169.113.172)

by fe1.cityemail.com with SMTP
(b70422d6-7916-11e7-b59f-1f8d7727941e); Fri, 04 Aug 2017 06:13:35 -0700
Content-Type: multipart/mixed; 
boundary=Apple-Mail-D45AC243-3753-9EB9-7327-C43F11E04639

Content-Transfer-Encoding: 7bit
From: nanette busst 
Mime-Version: 1.0 (1.0)
Date: Fri, 04 Aug 2017 18:43:31 +0530
Subject: IMG_9786.BMP
Message-Id: <0382c199-0d6b-69d0-3043-de000af74...@gmail.com>

Appears to be standard BOT style ransomware that is going around, but 
the rediff email servers should of course be adding a received header, 
when it accepts a message from another system.






--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic

A Wizard IT Company - For More Info http://www.wizard.ca
"MagicSpam" is a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and 
intended solely for the use of the individual or entity to which they 
are addressed. Please note that any views or opinions presented in this 
email are solely those of the author and are not intended to represent 
those of the company.




--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic

A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Fwd: Leverage Social Media to get guaranteed results

[Michael Peddemors]

Yes Michael,

If you are going to have your team tackle anything, the ones selling b2b 
mailing lists and contacts are one of your higher leakages..


I could send you a bunch off-list if you want ..

Offenders this week.. (just a sampling from my own spam folders)

Return-Path: 

Return-Path: 
Return-Path: 

All via *.outbound.protection.outlook.com

Have a great long weekend all..

--- Begin Message ---
Hello,

Social Media has evolved from a platform of uncertainty to a medium businesses 
can use to get guaranteed outcomes. With our team of experienced marketing 
experts, we help our clients achieve their objectives.

If you are interested reply back to get the “FREE SOCIAL MEDIA ANALYSIS “, 
“Company profile”, “Service details”,   “Pricing”, “Client Case Study” , 
“Detailed SMO plan”.

Area of Improvement:

1.  We will give you guaranteed outcome
2.  Improve your sales and business reach.
3.  We will increase the brand value & awareness from Targeted Market only
4.  Increase your website traffic

Warm Regards,
Martin Bell,
Business Development Manager
Note: - If you are not interested then you can reply with a simple \"NO\",We 
will never contact you again.


--- End Message ---
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] emails offering email l;ists for sale

[John Possidente]

No reason to hide the details here, and including them might help folks
help you.

Best,
John


On Thu, Aug 3, 2017 at 9:39 PM, Serge Malev  wrote:

> No, it's their own registered domain.
> From whois query:
>
>Domain Name: .COM
>Registry Domain ID: _DOMAIN_COM-VRSN
>Registrar WHOIS Server: whois.godaddy.com
>Registrar URL: http://www.godaddy.com
>Updated Date: 2017-08-01
>Creation Date: 2017-05-01
>Registry Expiry Date: 2018-05-01
>Registrar: GoDaddy.com, LLC
>Registrar IANA ID:
>Registrar Abuse Contact Email: ab...@godaddy.com
>Registrar Abuse Contact Phone: 480-624-2505 <(480)%20624-2505>
>Domain Status: clientDeleteProhibited https://icann.org/epp#
> clientDeleteProhibited
>Domain Status: clientRenewProhibited https://icann.org/epp#
> clientRenewProhibited
>Domain Status: clientTransferProhibited https://icann.org/epp#
> clientTransferProhibited
>Domain Status: clientUpdateProhibited https://icann.org/epp#
> clientUpdateProhibited
>Name Server: NS1.STS-L.COM
>Name Server: NS2.STS-L.COM
>DNSSEC: unsigned
>URL of the ICANN Whois Inaccuracy Complaint Form:
> https://www.icann.org/wicf/
>
>
>
> --
> *From:* Michael Wise 
> *Sent:* Friday, August 4, 2017 11:08 AM
> *To:* Serge Malev; mailop@mailop.org
> *Subject:* RE: emails offering email l;ists for sale
>
>
>
>
> Depends.
>
>
>
> If the sender is Hotmail, Outlook, et al … or if it’s an Office365
> customer, we always like to know about it.
>
> Prefer full headers at the very least.
>
>
>
> Can be reported to me, but we prefer it be sent to
> j...@office365.microsoft.com …
>
> Preferably with the evil bits as a .EML attachment (message/rfc822)
>
>
>
> Aloha,
>
> Michael.
>
> --
>
> *Michael J Wise*
> Microsoft Corporation| Spam Analysis
>
> "Your Spam Specimen Has Been Processed."
>
> Got the Junk Mail Reporting Tool
>  ?
>
>
>
> *From:* mailop [mailto:mailop-boun...@mailop.org] *On Behalf Of *Serge
> Malev
> *Sent:* Thursday, August 3, 2017 5:53 PM
> *To:* mailop@mailop.org
> *Subject:* [mailop] emails offering email l;ists for sale
>
>
>
> You don't often get email from sma...@hotmail.com. Learn why this is
> important. 
>
> Feedback 
>
> Hi.
>
> Would such an email be worth chasing to try and disable sender's domain or
> is it too hard and waste of time and let your trusty Anti-SPAM engine deal
> with them?
>
>
>
> ==
>
> *Envelope Sender:*
>
> terry@X
>
> *From:*
>
> "Terry "
>
> *Envelope Recipients:*
>
> *To:*
>
> *Host/IP Address:*
>
> A.B.C.D
>
> *Date:*
>
> 2017-08-04 10:27:06 [UTC+10:00]
>
> *Size:*
>
> 19 KB
>
> *Processing Server:*
>
> *Subject:*
>
> RE: Did you see this
>
> Would you like to purchase any of the following Targeted and Verified
> EMAIL lists?
>
>
>
> 1.  10,000 specific event attendees list at $1,000
>
>
>
> 2.  50,000 Purchasing and Procurement Managers list at $2,500
>
>
>
> 3.  500,000 CEOs contact list at $5,000
>
>
>
> 4.  80,000 CPA and Bookkeepers list at $4,000
>
>
>
> 5.  50,000 Architects and interior designers list at $2,500
>
> .
>
> ==
>
>
>
>
>
>
>
>
>
> Thank you,
>
> Serge.
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop