RE: [qmailtoaster] Still some problems with reputation and spammers
Some additional, how can I stop this? 03-28 10:46:35 tcpserver: status: 2/200 03-28 10:46:36 CHKUSER accepted sender: from padritzik...@clairwhots.info:: remote aoig02.kaverblunk.info:unknown:199.19.94.66 rcpt : sender accepted 03-28 10:46:36 CHKUSER accepted any rcpt: from padritzik...@clairwhots.info:: remote aoig02.kaverblunk.info:unknown:199.19.94.66 rcpt padrit...@mbninc.com : accepted any recipient for this domain 03-28 10:46:36 policy_check: remote padritzik...@clairwhots.info - local xxx...@mbninc.com (UNAUTHENTICATED SENDER) 03-28 10:46:36 policy_check: policy allows transmission 03-28 10:46:36 tcpserver: status: 3/200 03-28 10:46:36 tcpserver: pid 3831 from 75.102.9.134 03-28 10:46:36 tcpserver: ok 3831 mail.host2max.com:72.29.91.110:25 :75.102.9.134::42262 03-28 10:46:36 CHKUSER accepted sender: from sm...@makibrid.info:: remote fqye134.makibrid.info:unknown:75.102.9.134 rcpt : sender accepted 03-28 10:46:37 tcpserver: end 3831 status 0 From: Ronnie Tartar [mailto:rtar...@host2max.com] Sent: Wednesday, March 28, 2012 9:01 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Still some problems with reputation and spammers I've been looking @ my qmail logs. I have spamdyke installed. The following is an section of my qmail log. Are they still using bounce messages as a way to spam? I found some full mailboxes that I deleted that were particularly effected. 03-28 08:55:58 tcpserver: status: 2/200 03-28 08:55:58 tcpserver: pid 18349 from 108.171.242.42 03-28 08:55:58 tcpserver: ok 18349 mail.host2max.com:72.29.91.110:25 :108.171.242.42::50491 03-28 08:55:58 CHKUSER accepted sender: from bounce-5534-2742441560-swk=kremp@drwhotardis.com:: remote dr423573.drwhotardis.com:unknown:108.171.242.42 rcpt : sender accepted 03-28 08:55:58 tcpserver: end 18349 status 0 03-28 08:55:58 tcpserver: status: 1/200 03-28 08:56:01 tcpserver: status: 2/200 03-28 08:56:01 tcpserver: pid 18360 from 76.191.102.213 03-28 08:56:01 tcpserver: ok 18360 mail.host2max.com:72.29.91.110:25 :76.191.102.213::27298 03-28 08:56:02 CHKUSER accepted sender: from southwestairli...@donwisemanassociates.com:: remote finance.donwisemanassociates.com:unknown:76.191.102.213 rcpt : sender accepted 03-28 08:56:02 tcpserver: end 18360 status 0 03-28 08:56:02 tcpserver: status: 1/200 03-28 08:56:02 CHKUSER accepted sender: from bou...@bounce.thelaw.net:: remote smtp.thelaw.net:unknown:66.181.1.109 rcpt : sender accepted
RE: [qmailtoaster] Still some problems with reputation and spammers
When I look in my queue, I can't tell if these are bounce messages or what? messages in queue: 10 messages in queue but not yet preprocessed: 0 28 Mar 2012 08:34:35 GMT #5833492 92757 remote padritzi...@hendsnatus.info 28 Mar 2012 17:12:34 GMT #5833515 78302 remote padritzi...@mowiedelas.info 28 Mar 2012 17:28:41 GMT #5833516 77837 remote 1c80f04a7layfovcia3j2xpiabyaep3vsuga5wyyaa...@target.bfi0.com 28 Mar 2012 14:36:37 GMT #5833494 96508 remote pete...@meionasig.info 28 Mar 2012 14:44:23 GMT #5833499 147910 remote peter...@clairwhots.info 28 Mar 2012 17:08:53 GMT #5833523 145656 contac...@kremp.com remote charissa.rom...@weathford.com 28 Mar 2012 17:19:26 GMT #5833524 95493 remote padritzik...@studedarop.info 28 Mar 2012 14:46:41 GMT #5833503 148034 remote padritzik...@clairwhots.info 28 Mar 2012 09:50:50 GMT #5833457 92631 remote pete...@hendsnatus.info 28 Mar 2012 16:04:19 GMT #5833507 97097 remote padritzi...@bolrcunits.info They look bogus. How can these be prevented? Thanks in advance. From: Ronnie Tartar [mailto:rtar...@host2max.com] Sent: Wednesday, March 28, 2012 10:49 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Still some problems with reputation and spammers Some additional, how can I stop this? 03-28 10:46:35 tcpserver: status: 2/200 03-28 10:46:36 CHKUSER accepted sender: from padritzik...@clairwhots.info:: remote aoig02.kaverblunk.info:unknown:199.19.94.66 rcpt : sender accepted 03-28 10:46:36 CHKUSER accepted any rcpt: from padritzik...@clairwhots.info:: remote aoig02.kaverblunk.info:unknown:199.19.94.66 rcpt padrit...@mbninc.com : accepted any recipient for this domain 03-28 10:46:36 policy_check: remote padritzik...@clairwhots.info - local xxx...@mbninc.com (UNAUTHENTICATED SENDER) 03-28 10:46:36 policy_check: policy allows transmission 03-28 10:46:36 tcpserver: status: 3/200 03-28 10:46:36 tcpserver: pid 3831 from 75.102.9.134 03-28 10:46:36 tcpserver: ok 3831 mail.host2max.com:72.29.91.110:25 :75.102.9.134::42262 03-28 10:46:36 CHKUSER accepted sender: from sm...@makibrid.info:: remote fqye134.makibrid.info:unknown:75.102.9.134 rcpt : sender accepted 03-28 10:46:37 tcpserver: end 3831 status 0 From: Ronnie Tartar [mailto:rtar...@host2max.com] Sent: Wednesday, March 28, 2012 9:01 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Still some problems with reputation and spammers Ive been looking @ my qmail logs. I have spamdyke installed. The following is an section of my qmail log. Are they still using bounce messages as a way to spam? I found some full mailboxes that I deleted that were particularly effected. 03-28 08:55:58 tcpserver: status: 2/200 03-28 08:55:58 tcpserver: pid 18349 from 108.171.242.42 03-28 08:55:58 tcpserver: ok 18349 mail.host2max.com:72.29.91.110:25 :108.171.242.42::50491 03-28 08:55:58 CHKUSER accepted sender: from bounce-5534-2742441560-swk=kremp@drwhotardis.com:: remote dr423573.drwhotardis.com:unknown:108.171.242.42 rcpt : sender accepted 03-28 08:55:58 tcpserver: end 18349 status 0 03-28 08:55:58 tcpserver: status: 1/200 03-28 08:56:01 tcpserver: status: 2/200 03-28 08:56:01 tcpserver: pid 18360 from 76.191.102.213 03-28 08:56:01 tcpserver: ok 18360 mail.host2max.com:72.29.91.110:25 :76.191.102.213::27298 03-28 08:56:02 CHKUSER accepted sender: from southwestairli...@donwisemanassociates.com:: remote finance.donwisemanassociates.com:unknown:76.191.102.213 rcpt : sender accepted 03-28 08:56:02 tcpserver: end 18360 status 0 03-28 08:56:02 tcpserver: status: 1/200 03-28 08:56:02 CHKUSER accepted sender: from bou...@bounce.thelaw.net:: remote smtp.thelaw.net:unknown:66.181.1.109 rcpt : sender accepted - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Still some problems with reputation and spammers
Spamdyke's blacklist_rdns file add: .info 2012/3/28 Ronnie Tartar rtar...@host2max.com When I look in my queue, I can't tell if these are bounce messages or what? messages in queue: 10 messages in queue but not yet preprocessed: 0 28 Mar 2012 08:34:35 GMT #5833492 92757 remote padritzi...@hendsnatus.info 28 Mar 2012 17:12:34 GMT #5833515 78302 remote padritzi...@mowiedelas.info 28 Mar 2012 17:28:41 GMT #5833516 77837 remote 1c80f04a7layfovcia3j2xpiabyaep3vsuga5wyyaa...@target.bfi0.com 28 Mar 2012 14:36:37 GMT #5833494 96508 remote pete...@meionasig.info 28 Mar 2012 14:44:23 GMT #5833499 147910 remote peter...@clairwhots.info 28 Mar 2012 17:08:53 GMT #5833523 145656 contac...@kremp.com remote charissa.rom...@weathford.com 28 Mar 2012 17:19:26 GMT #5833524 95493 remote padritzik...@studedarop.info 28 Mar 2012 14:46:41 GMT #5833503 148034 remote padritzik...@clairwhots.info 28 Mar 2012 09:50:50 GMT #5833457 92631 remote pete...@hendsnatus.info 28 Mar 2012 16:04:19 GMT #5833507 97097 remote padritzi...@bolrcunits.info They look bogus. How can these be prevented? Thanks in advance. From: Ronnie Tartar [mailto:rtar...@host2max.com] Sent: Wednesday, March 28, 2012 10:49 AM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Still some problems with reputation and spammers Some additional, how can I stop this? 03-28 10:46:35 tcpserver: status: 2/200 03-28 10:46:36 CHKUSER accepted sender: from padritzik...@clairwhots.info:: remote aoig02.kaverblunk.info:unknown:199.19.94.66 rcpt : sender accepted 03-28 10:46:36 CHKUSER accepted any rcpt: from padritzik...@clairwhots.info:: remote aoig02.kaverblunk.info:unknown:199.19.94.66 rcpt padrit...@mbninc.com : accepted any recipient for this domain 03-28 10:46:36 policy_check: remote padritzik...@clairwhots.info - local xxx...@mbninc.com (UNAUTHENTICATED SENDER) 03-28 10:46:36 policy_check: policy allows transmission 03-28 10:46:36 tcpserver: status: 3/200 03-28 10:46:36 tcpserver: pid 3831 from 75.102.9.134 03-28 10:46:36 tcpserver: ok 3831 mail.host2max.com:72.29.91.110:25 :75.102.9.134::42262 03-28 10:46:36 CHKUSER accepted sender: from sm...@makibrid.info:: remote fqye134.makibrid.info:unknown:75.102.9.134 rcpt : sender accepted 03-28 10:46:37 tcpserver: end 3831 status 0 From: Ronnie Tartar [mailto:rtar...@host2max.com] Sent: Wednesday, March 28, 2012 9:01 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Still some problems with reputation and spammers I’ve been looking @ my qmail logs. I have spamdyke installed. The following is an section of my qmail log. Are they still using bounce messages as a way to spam? I found some full mailboxes that I deleted that were particularly effected. 03-28 08:55:58 tcpserver: status: 2/200 03-28 08:55:58 tcpserver: pid 18349 from 108.171.242.42 03-28 08:55:58 tcpserver: ok 18349 mail.host2max.com:72.29.91.110:25 :108.171.242.42::50491 03-28 08:55:58 CHKUSER accepted sender: from bounce-5534-2742441560-swk=kremp@drwhotardis.com:: remote dr423573.drwhotardis.com:unknown:108.171.242.42 rcpt : sender accepted 03-28 08:55:58 tcpserver: end 18349 status 0 03-28 08:55:58 tcpserver: status: 1/200 03-28 08:56:01 tcpserver: status: 2/200 03-28 08:56:01 tcpserver: pid 18360 from 76.191.102.213 03-28 08:56:01 tcpserver: ok 18360 mail.host2max.com:72.29.91.110:25 :76.191.102.213::27298 03-28 08:56:02 CHKUSER accepted sender: from southwestairli...@donwisemanassociates.com:: remote finance.donwisemanassociates.com:unknown:76.191.102.213 rcpt : sender accepted 03-28 08:56:02 tcpserver: end 18360 status 0 03-28 08:56:02 tcpserver: status: 1/200 03-28 08:56:02 CHKUSER accepted sender: from bou...@bounce.thelaw.net:: remote smtp.thelaw.net:unknown:66.181.1.109 rcpt : sender accepted - Qmailtoaster is sponsored by Vickers Consulting Group ( www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
