Re: [mailop] How to contact ClamAVNet support

2022-06-06 Thread Tim Bray via mailop


On 03/06/2022 11:13, Carlota Iglesias Martinez via mailop wrote:
I have managed to find that “Herustics” refers that they are coming 
from a financial institution and ‘SpoofedDomain’ means that they 
contain hyperlinks that are not known to be associated with the 
organization and may be phishing attempt. I can’t find any suspicious 
links on the email content. 



I think you have to remember that without dmarc, it is very easy to send 
email from bongosbank.com with links pointing to a scam site.   And 
people click these links, because they come from a trusted source :)    
(People even forward these scam emails to their PAs and say `can you 
sort this for me?`)


So at work we run clamav  with the securiteinfo.com extra signatures.  
And rspamd.


And financial companies (our banks) give us the most trouble. PDFs with 
javascript. Wordocs with weird macros.   Emails with links that point to 
really crazy domains.  All usually something to just print, fill in and 
send back in snail mail.


And second of all, the banks are most upset when they get a call back 
saying `We didn't get your email`, `oh, I checked with IT and what you 
are emailing definitely looks like a virus`.  It's always our fault and 
they are always very defensive.  And we end up whitelisting them because 
otherwise we can't operate because we need flowing money, thus opening 
the door to real scammers.


Yet the banks are emailing us every week saying `watch out for phishing 
attempts`.  I'd counter that they just need to make their IT more plain 
and simple with way less tracking, which would benefit security.



And this is before we get onto:

10 different marketing click tracking, pop up loading, lots of 
javascript from 8 different domains/CDNs in a simple website.


Tim
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] Yohoo rejecting mails from Rackspace

2022-06-06 Thread Nitin Kumar via mailop
Hi,

Any one from Yahoo mail please look into this issue. Mails from Rackspace are 
getting rejected by Yahoo.

Some of our IPs which are affected:

184.106.54.111
184.106.54.108
184.106.54.75
184.106.54.74
184.106.54.116
184.106.54.102
184.106.54.119

We are getting this error:

Failed - host mta5.am0.yahoodns.net[67.195.228.106] said: 553 5.7.2 [TSS11] All 
messages from 184.106.54.108 will be permanently deferred; Retrying will NOT 
succeed. See https://postmaster.yahooinc.com/error-codes (in reply to MAIL FROM 
command)

I would be grateful if you could investigate this issue and reply to us.

Regards
Nitin Kumar
Postmaster
Rackspace Technology

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Talking DOXING of spammers on this mailing list..

2022-06-06 Thread Larry M. Smith via mailop

On 6/1/2022, Michael Peddemors via mailop wrote:
(snip)
In leiu of my bi-weekly state of the union (spam threats) email, I think 
we should consider working together to do a little 'doxing' of the bad 
guys.. Now, I know it is done in other places, SpamHaus used to post 
regularly about ROCKSO spammers, etc.. but since it appears to be 
affecting everyone on the list, why not co-operatively take on one bad 
guy every couple of weeks..


Off the top of my head, I feel that it would be unlikely to have good 
participation on this subject in such a public forum.  I have been 
thinking about what a vetted community might look like for a while now.


.. it is encouraging to know that others feel the same way as I, and 
that it might be possible to boot-strap such a community.



SgtChains
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] How to contact ClamAVNet support

2022-06-06 Thread Slavko via mailop
Dňa 6. júna 2022 14:10:17 UTC používateľ Tim Bray via mailop 
 napísal:

>And financial companies (our banks) give us the most trouble. PDFs with 
>javascript. Wordocs with weird macros.   Emails with links that point to 
>really crazy domains.  All usually something to just print, fill in and send 
>back in snail mail.

Thanks for this, i see the same behaviour from our (Slovak) e-shops. While most 
of them
haven't own IT team, i feel very bad, but now i see, that this is not exclusive 
to our country ;-)

regards

Slavko
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Yohoo rejecting mails from Rackspace

2022-06-06 Thread Matthew V via mailop
If you haven't already tried it Yahoo has a support page: 
https://senders.yahooinc.com/contact


~MV

On 2022-06-06 11:18 a.m., Nitin Kumar via mailop wrote:


Hi,

Any one from Yahoo mail please look into this issue. Mails from 
Rackspace are getting rejected by Yahoo.


Some of our IPs which are affected:

184.106.54.111

184.106.54.108

184.106.54.75

184.106.54.74

184.106.54.116

184.106.54.102

184.106.54.119

We are getting this error:

Failed - host mta5.am0.yahoodns.net[67.195.228.106] said: 553 5.7.2 
[TSS11] All messages from 184.106.54.108 will be permanently deferred; 
Retrying will NOT succeed. See 
https://postmaster.yahooinc.com/error-codes (in reply to MAIL FROM 
command)


I would be grateful if you could investigate this issue and reply to us.

Regards

Nitin Kumar

Postmaster

Rackspace Technology


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Fwd: *** SPAM *** Sparkpost sending spam on behalf of \"Time Travel Promotion LP\"

2022-06-06 Thread Hans-Martin Mosner via mailop

Am 21.05.22 um 18:46 schrieb Kent McGovern via mailop:

I sent this directly to Hans-Martin, wanted to share it with the list as well.

Kent McGovern
Sr.Deliverability Strategist
Sparkpost

-- Forwarded message -
From: *Kent McGovern* 
Date: Sat, May 21, 2022 at 10:26 AM
Subject: Re: [mailop] *** SPAM *** Sparkpost sending spam on behalf of \"Time Travel 
Promotion LP\"
To: Hans-Martin Mosner 


Hi Hans-Martin,

Thank you for letting us know. We will investigate this issue and get back to 
you.


While I appreciated that response, I'm somewhat disappointed with the action.

The spammer continues to send their spam mail. Looks like they convinced Sparkpost that what they're doing isn't spam 
but valuable information sent to a hand-picked audience who *wants* that information.


Cheers,
Hans-Martin
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Fwd: *** SPAM *** Sparkpost sending spam on behalf of \"Time Travel Promotion LP\"

2022-06-06 Thread Kent McGovern via mailop
Let me reach out to our compliance team to see the status of this.

Kent McGovern
Sr.Deliverability Strategist
Sparkpost

On Mon, Jun 6, 2022 at 1:06 PM Hans-Martin Mosner via mailop <
mailop@mailop.org> wrote:

> Am 21.05.22 um 18:46 schrieb Kent McGovern via mailop:
>
> I sent this directly to Hans-Martin, wanted to share it with the list as
> well.
>
> Kent McGovern
> Sr.Deliverability Strategist
> Sparkpost
>
> -- Forwarded message -
> From: Kent McGovern 
> Date: Sat, May 21, 2022 at 10:26 AM
> Subject: Re: [mailop] *** SPAM *** Sparkpost sending spam on behalf of
> \"Time Travel Promotion LP\"
> To: Hans-Martin Mosner 
>
>
> Hi Hans-Martin,
>
> Thank you for letting us know. We will investigate this issue and get back
> to you.
>
> While I appreciated that response, I'm somewhat disappointed with the
> action.
>
> The spammer continues to send their spam mail. Looks like they convinced
> Sparkpost that what they're doing isn't spam but valuable information sent
> to a hand-picked audience who *wants* that information.
>
> Cheers,
> Hans-Martin
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] hostgator contact?

2022-06-06 Thread Dave Lugo via mailop


If anyone has a contact at hostgator that can help with a
spam filter issue on their end, please send me the contact
details...

Thanks in advance,

Dave

--

Dave Lugo   dl...@etherboy.comLC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.

Are you the police?  . . . .  No ma'am, we're sysadmins.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] hostgator contact?

2022-06-06 Thread Jarland Donnell via mailop
It’s been a few years since I worked there but I can’t imagine they’ve 
changed that much. Aren’t the spam filters all user controlled? At least 
if not outsourced to an external RBL.


On 2022-06-06 20:52, Dave Lugo via mailop wrote:

If anyone has a contact at hostgator that can help with a
spam filter issue on their end, please send me the contact
details...

Thanks in advance,

Dave

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Yohoo rejecting mails from Rackspace

2022-06-06 Thread Noel Butler via mailop

On 07/06/2022 01:18, Nitin Kumar via mailop wrote:


Hi,

Any one from Yahoo mail please look into this issue. Mails from 
Rackspace are getting rejected by Yahoo.


Some of our IPs which are affected:

184.106.54.111

184.106.54.108

184.106.54.75

184.106.54.74

184.106.54.116

184.106.54.102

184.106.54.119

We are getting this error:

Failed - host mta5.am0.yahoodns.net[67.195.228.106] said: 553 5.7.2 
[TSS11] All messages from 184.106.54.108 will be permanently deferred; 
Retrying will NOT succeed. See 
https://postmaster.yahooinc.com/error-codes (in reply to MAIL FROM 
command)


I would be grateful if you could investigate this issue and reply to 
us.


Regards

Nitin Kumar

Postmaster

Rackspace Technology

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Most (but not all) of those are listed in at least one RBL 
(spam.sorbs...)


Before asking them for removal I suggest you find the offenders and kick 
em off


--
Regards,
Noel Butler

This Email, including attachments, may contain legally privileged 
information, therefore at all times remains confidential and subject to 
copyright protected under international law. You may not disseminate 
this message without the authors express written authority to do so.   
If you are not the intended recipient, please notify the sender then 
delete all copies of this message including attachments immediately. 
Confidentiality, copyright, and legal privilege are not waived or lost 
by reason of the mistaken delivery of this message.___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] hostgator contact?

2022-06-06 Thread Sean Hogberg via mailop
Answered off list, incoming RBL stuff is a bit between owners at the moment
but think this should be fixed now.

--Sean

On Mon, Jun 6, 2022, 5:17 PM Jarland Donnell via mailop 
wrote:

> It’s been a few years since I worked there but I can’t imagine they’ve
> changed that much. Aren’t the spam filters all user controlled? At least
> if not outsourced to an external RBL.
>
> On 2022-06-06 20:52, Dave Lugo via mailop wrote:
> > If anyone has a contact at hostgator that can help with a
> > spam filter issue on their end, please send me the contact
> > details...
> >
> > Thanks in advance,
> >
> > Dave
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop