Re: [mailop] Mailman confirmation email denial of service

2020-08-21 Thread Norbert Bollow via mailop
On Fri, 21 Aug 2020 10:03:48 +0300
Lena--- via mailop  wrote:

> > I have searched a few emails, but fail to see why they would be a
> > target. Maybe only a few of them are the real targets, with other
> > addresses being added in order to conceal those?  
> 
> I suspect that the bot is spamming random web-forms
> like various bots try to spam my guestbook with ads with links.
> If a bot sees an "email" field then it fills it with a random email
> address.

I'm seeing the same phenomenon.

The email addresses don't seem to be entirely random though, they look
to me as if they come from a somewhat dated list of real email addresses
of real people (some of those email address by now being invalid).

For this reason I suspect that this may be done by someone whose
“business” is email spamming.

Maybe the idea behind that bot is that filling in the "email" field
with a real-looking email address might lead to being granted read
access to mailing list archives which could then be scraped for email
addresses to increase the target list for the spammer's main spam runs?

Greetings,
Norbert

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Hotmail blacklist

2020-04-21 Thread Norbert Bollow via mailop
Maybe it's not specifically you server's IP that's on the blacklist,
but an IP range belonging to your ISP (which includes your server)?

Greetings,
Norbert


On Tue, 21 Apr 2020 10:35:38 -0500
Michael via mailop  wrote:

> My server's IP is on the hotmail blacklist. I can't find any details
> as to why. I only have four users and we don't send any bulk mail.
> Mostly just a small law firm communicating with clients. I'm set up
> with SNDS but I don't see any details there that let me track down
> the source of the blacklisting. I just set up the junk mail
> reporting. I thought I had already done that but I don't remember
> ever getting any reports.
> 
> Is there any way to get off this list?
> 
> 
> I filled out a support request and received this response:
> 
> We have completed reviewing the IP(s) you submitted. The following
> table contains the results of our investigation.
> 
> Not qualified for mitigation
> 52.10.9.48
> Our investigation has determined that the above IP(s) do not qualify
> for mitigation.
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Bots, spam-traps and signup pages

2019-05-10 Thread Norbert Bollow via mailop
On Thu, 9 May 2019 22:43:30 +0100 (BST)
Andrew C Aitchison via mailop  wrote:

> On Thu, 9 May 2019, Rob McEwen via mailop wrote:
> > That has been happening OFTEN in recent years - and those who 
> > don't do COI and don't captcha-protect their forms (or some 
> > equivalent only-a-human-could-have-done-this protection) - are 
> > OFTEN getting blacklisted due to spamtrap addresses sneaking 
> > into their distribution lists.  
> 
> Is this deliberate enemy action or collateral damage ?
> I'm finding it difficult to see why a general spam bot
> would sign spam traps up to a mailing list,
> so guess that I am missing something ?

One issue is that even mailing lists that have only confirmed opt-in
subscriptions can contain spam-trap email addresses, where previously
legitimate email addresses were after a time of non-use repurposed as
spam-traps.

The general advice to counter that problem is that mailing lists should
reasonably aggressively remove bouncing email addresses.

This advice is however problematic for those mailing lists which, e.g.
due to the subject matter, relatively often generate bounces from spam
filtering false positives, as those can be difficult or impossible to
distinguish from bad email address bounces in a fully-automated and
yet reliable way.

Greetings,
Norbert

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop