RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread David Stavert
I have been through this s number of times. Savvis will probably just do recursive queries. As I assume they have large blocks of addresses so the root number servers point to Savvis which will then hand off the query to your server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMA

Now for the next question is SpamCOP whitelisting ATT IPs. RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread Chuck Schick
Scott: To follow up on this thread - does anyone know how to get a hold of someone at spamcop and find out why their parsing does not nab the ATT address and the offending IP? They are doing us a tremendous disservice if that is the case. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com

RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread R. Scott Perry
>I just want to block the class C 204.127.131.0-254/ not the class B. XBL seems to have listed the whole Class B. I can't say whether or not that Class C range would have legitimate mail coming from it, but I can almost guarantee you that there would be legitimate mail coming from the Class

RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread Chuck Schick
I just want to block the class C 204.127.131.0-254/ not the class B. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, March 26, 2002 4:18 PM To: [EMAIL PROTECTED] Subje

RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread R. Scott Perry
>So is the answer that these IPs are sites hosted by onesitemarket.com on the >ATT backbone? So can I block these without fear of blocking legitimate >email from ATT.net? It looks like XBL blacklisted the entire Class B range there, which includes the main @worldnet.att.net mailservers. So bl

RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread Chuck Schick
So is the answer that these IPs are sites hosted by onesitemarket.com on the ATT backbone? So can I block these without fear of blocking legitimate email from ATT.net? Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECT

RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread R. Scott Perry
>(127.0.0.4) 204.127.131.29 is DNSbl listed. by xbl.selwerd.cx > >www.onesitemarket.com >AT&T signed a pink contract >hosting proxy.4esc.net >please see http://selwerd.cx/xbl/ >this is not a list of open relays > >What is a pink contract and the hosting proxy mean. Going to Google and entering "

RE: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread Chuck Schick
Scott: When I go to Osirusoft to check for an open relay the Ip does not show up as an open relay except for under xbl.selwerd.cx and then I get the following message. start (127.0.0.4) 204.127.131.29 is DNSbl listed. by xbl.selwerd.cx www.onesitemarket.com

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread John Tolmachoff
Is it happy hour yet? John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Madscientist Sent:

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Todd Holt
And if you do it automatically, then its, well automatic! :-)) Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Madscientist Sent: Tuesday, March 26, 2002 3:10 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-c

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Madscientist
[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] That all depends on how you're managing your DNS... If you

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claimscourt

2002-03-26 Thread R. Scott Perry
>Doesn't the SOA automatically increment when a change is made? Some DNS servers will automatically increment the SOA, others do not. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMa

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread John Tolmachoff
Doesn't the SOA automatically increment when a change is made? Or is that only in Windows 2000 DNS? John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com   -Original Message- From

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claimscourt

2002-03-26 Thread R. Scott Perry
>The issue is specific to his domain, since I use Savvis for my backbone, I >thought it best to check, and everything is fine for my block 209.144.1.0/24 >in both servers. Actually, it doesn't seem specific to his domain. It's specific to all Savvis reverse DNS entries in the 216.88.0.0/16 Cla

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Madscientist
[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] Today, I have all the luck. %^b _M | -Original Messag

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Charles Frolick
The issue is specific to his domain, since I use Savvis for my backbone, I thought it best to check, and everything is fine for my block 209.144.1.0/24 in both servers. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Madscientist
[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] Thanks... I've forwarded that info as well. _M | -Ori

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Madscientist
[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] Once upon a time they had done this... Long ago... Somebod

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claimscourt

2002-03-26 Thread R. Scott Perry
>When I follow the dnsstuff link that John gave: > >http://www.dnsstuff.com/tools/ptr.ch?ip=216.88.36.96 > >I get varied results. Sometimes, it does come back with a revdns and >sometimes not. I have attached the results from 2 attempts. Run it a few >times and see the difference. Good catch.

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Todd Holt
When I follow the dnsstuff link that John gave: http://www.dnsstuff.com/tools/ptr.ch?ip=216.88.36.96 I get varied results. Sometimes, it does come back with a revdns and sometimes not. I have attached the results from 2 attempts. Run it a few times and see the difference. Scott, is there a d

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread John Tolmachoff
You may have it set up internally, but look here; http://www.dnsstuff.com/tools/ptr.ch?ip=216.88.36.96 Not according to what the Internet can see. NS2.SAVVIS.NET. (an authoritative nameserver for 88.216.in-addr.arpa.) says that there are no PTR records for 216.88.36.96. To get a PTR record, you

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claimscourt

2002-03-26 Thread R. Scott Perry
>[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All >Internet hosts are required to have a reverse DNS entry. The missing >reverse DNS entry will cause your mail to be treated as spam on some >servers, such as AOL.] > > >OK, I'll bite. This server does in fact have a re

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Madscientist
[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] [NOTE: Your mail server [216.88.36.96] is missing a revers

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread John Tolmachoff
Time to start wearing my eye glasses again. John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Madscientist
[NOTE: Your mail server [216.88.36.96] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] [NOTE: Your mail server [216.88.36.96] is missing a revers

RE: DORKZTL:RE: [Declude.JunkMail] Receipts

2002-03-26 Thread John Tolmachoff
I am still waiting for his response. John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Todd Holt
I have to agree, John. I thought this was a step in the right direction. Not to be negative, but... Are these fines large enough to stop SPAMmers that could potentially make much more than the fines. In essence, they could be a cost of doing business for the SPAMmers. Does anyone know how much

DORKZTL:RE: [Declude.JunkMail] Receipts

2002-03-26 Thread Don Schreiner
Hehe! Whack with the return receipt sender clue-stick! Next... As soon as I saw it - I thought of the wrath of Len! -Don S. > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED]] On Behalf Of John Tolmachoff > Sent: Tuesday, March 26, 2002 12:

Re: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Dean Zingle, Ipswitch.ca
Huh? Did you read the article John? I may have to re-read the article, but I got the exact opposite out of it ... Dean - Original Message - From: "John Tolmachoff" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 26, 2002 11:31 AM Subject: RE: [Declude.JunkMail] DORKZTL

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread John Tolmachoff
Great. One more court decision making our life hard. John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] O

[Declude.JunkMail] Receipts

2002-03-26 Thread John Tolmachoff
OK, ready for the onslaught of comments. Sorry. John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com   --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com

RE: [Declude.JunkMail] Domain setting

2002-03-26 Thread R. Scott Perry
>I guess I really should read the manual once in a while. :-) > >What about the XINHEADER, XOUTHEADER, XSENDER and XSPOOLNAME in the >Global.cfg file? Is there a way to set those per domain? No, those only work in the global.cfg file, and apply to all E-mail going through the server.

RE: [Declude.JunkMail] Domain setting

2002-03-26 Thread John Tolmachoff
I guess I really should read the manual once in a while. :-) What about the XINHEADER, XOUTHEADER, XSENDER and XSPOOLNAME in the Global.cfg file? Is there a way to set those per domain? John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-799

Re: [Declude.JunkMail] Domain setting

2002-03-26 Thread R. Scott Perry
>Is there a way to configure Declude not to scan/process all mail on a >single virtual domain? You can see the "Per-domain Configuration" section of the manual for details on how to set this up. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http

[Declude.JunkMail] Domain setting

2002-03-26 Thread John Tolmachoff
Is there a way to configure Declude not to scan/process all mail on a single virtual domain? John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA  92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com     --- [This E-mail was scanned for virus

Re: [Declude.JunkMail] Help with some headers.

2002-03-26 Thread R. Scott Perry
>I am getting a lot of spam from a particular class C (204.127.131.0-254) >and when I process it through spam cop it never shows those IPs as the >offenders. I'm not sure why it doesn't show those IPs as the offenders: >Received: from mtiwgwc26.worldnet.att.net [204.127.131.29] by >mail.integra

[Declude.JunkMail] Help with some headers.

2002-03-26 Thread Chuck Schick
I am getting a lot of spam from a particular class C (204.127.131.0-254) and when I process it through spam cop it never shows those IPs as the offenders. I was hoping that one of the spam experts on this list could tell me what is going. I am asking because I am considering blocking that Class

[Declude.JunkMail] v1.46 Released

2002-03-26 Thread R. Scott Perry
We have just released Declude JunkMail v1.46 ( http://www.declude.com/junkmail/manual.htm ). It includes several minor fixes and enhancements since the last release. The release notes can be found at http://www.declude.com/relnotes.htm . -Scott --- [This E-ma