Re: [NF] eMail flood on my server

2007-01-22 Thread MB Software Solutions
Kenneth Kixmoeller/fh wrote: > OK, I finally found it, but it was Alan Lukachko, not Michael. > (Fortunately MB responded a few times in the thread, so I found it.) > Glad to help (indirectly as it were). -- Michael J. Babcock, MCP MB Software Solutions, LLC http://mbsoftwaresolutions.com

RE: [NF] eMail flood on my server

2007-01-22 Thread Alan Lukachko
Re: [NF] eMail flood on my server On Jan 22, 2007, at 5:41 PM, Kenneth Kixmoeller/fh wrote: > I think the situation was some spammer spoofed *his* domain as the > one originating the posts, OK, I finally found it, but it was Alan Lukachko, not Michael. (Fortunately MB responded a few ti

Re: [NF] eMail flood on my server

2007-01-22 Thread Whil Hentzen (Pro*)
Kenneth Kixmoeller/fh wrote: > On Jan 22, 2007, at 5:41 PM, Kenneth Kixmoeller/fh wrote: > >> I think the situation was some spammer spoofed *his* domain as the >> one originating the posts, > > OK, I finally found it, but it was Alan Lukachko, not Michael. > (Fortunately MB responded a few tim

Re: [NF] eMail flood on my server

2007-01-22 Thread Kenneth Kixmoeller/fh
On Jan 22, 2007, at 5:41 PM, Kenneth Kixmoeller/fh wrote: > I think the situation was some spammer spoofed *his* domain as the > one originating the posts, OK, I finally found it, but it was Alan Lukachko, not Michael. (Fortunately MB responded a few times in the thread, so I found it.) ht

Re: [NF] eMail flood on my server

2007-01-22 Thread Kenneth Kixmoeller/fh
On Jan 22, 2007, at 4:30 PM, Richard Kaye wrote: > You can try this: > > > > Kenneth Kixmoeller/fh wrote: >> Any still-free alternatives anybody knows (and trusts)? >> thanks -- it says I am OK. You know, I am be

Re: [NF] eMail flood on my server

2007-01-22 Thread Richard Kaye
You can try this: Kenneth Kixmoeller/fh wrote: > Any still-free alternatives anybody knows (and trusts)? > -- Richard Kaye Vice President Artfact/RFC Systems Voice: 617.219.1038 Fax: 617.219.1001 For the fastest response time, please send your support quer

Re: [NF] eMail flood on my server

2007-01-22 Thread Kenneth Kixmoeller/fh
On Jan 22, 2007, at 6:37 AM, Ed Leafe wrote: > http://redtape.msnbc.com/2007/01/spam_is_back_an.html Good article -- amazing, though, how many of the comments at the bottom completely missed the point. "Death to Spammers" is useless when *you* are the spammer, infected with a "bot." I

Re: [NF] eMail flood on my server

2007-01-22 Thread Kenneth Kixmoeller/fh
On Jan 22, 2007, at 2:32 AM, Michael Hawksworth wrote: > It is possible that your system is being used as relay... Thanks, but no --- I check it at ORDB every once in a while (because I made that mistake once). Ken ___ Post Messages to: ProFox@l

Re: [NF] eMail flood on my server

2007-01-22 Thread Ed Leafe
On Jan 21, 2007, at 5:30 PM, Kenneth Kixmoeller/fh wrote: > It just seems like there are much easier ways to harvest eMail > addresses... hardly worth the programming time to do it this way. But > I suppose they are just having "fun." http://redtape.msnbc.com/2007/01/spam_is_back_an.html

Re: [NF] eMail flood on my server

2007-01-22 Thread Ed Leafe
On Jan 22, 2007, at 3:32 AM, Michael Hawksworth wrote: > It is possible that your system is being used as relay (i.e. you send > email to [EMAIL PROTECTED]@leafe.com and if it is a relay it sends > the email on to [EMAIL PROTECTED] but looks to send it from > leafe.com > to the unwary).

Re: [NF] eMail flood on my server

2007-01-22 Thread Michael Hawksworth
It is possible that your system is being used as relay (i.e. you send email to [EMAIL PROTECTED]@leafe.com and if it is a relay it sends the email on to [EMAIL PROTECTED] but looks to send it from leafe.com to the unwary). You can test your email for this at a number of web sites (just look in

Re: [NF] eMail flood on my server

2007-01-21 Thread Kenneth Kixmoeller/fh
On Jan 21, 2007, at 7:29 PM, Ed Leafe wrote: > All you can get from a bounced message is the IP address of the > server that is trying to send it to you. That could be the > originator, or it could be an intermediate that is relaying the mail. Thank you. The IP addresses are all different,

Re: [NF] eMail flood on my server

2007-01-21 Thread Ed Leafe
On Jan 21, 2007, at 8:03 PM, Kenneth Kixmoeller/fh wrote: > Since all of these spambot messages are to an > invalid user name, they are being bounced by my email server > software, so they are never making it to any client. I don't know how > to see anything more about bounced messages than what s

Re: [NF] eMail flood on my server

2007-01-21 Thread Kenneth Kixmoeller/fh
On Jan 21, 2007, at 6:08 PM, Whil Hentzen (Pro*) wrote: > I might be misunderstanding what you're seeing... but I was > referring to > looking at the headers of an email message. > > In thunderbird... OK, Whil, thanks. I'll try to be clearer. Thunderbird is the client. Mine is Mac:Mail. Sinc

Re: [NF] eMail flood on my server

2007-01-21 Thread Whil Hentzen (Pro*)
Kenneth Kixmoeller/fh wrote: > On Jan 21, 2007, at 1:22 PM, Whil Hentzen (Pro*) wrote: > >> If you look up the 'from' chain, you'll eventually see the starting >> point of the email (the 'envelope', so to speak.) Are they all the >> same >> (probably likely) or different? > > Al I see on the se

Re: [NF] eMail flood on my server

2007-01-21 Thread Ed Leafe
On Jan 21, 2007, at 6:14 PM, Kenneth Kixmoeller/fh wrote: > I wonder when it is going to get bad enough that "the powers" decide > that it is time to fundamentally redesign how eMail works. All of > this stuff "inhales vigorously." About the same time that those same powers decide that it

Re: [NF] eMail flood on my server

2007-01-21 Thread Kenneth Kixmoeller/fh
On Jan 21, 2007, at 4:51 PM, Ed Leafe wrote: > No, it's not for fun. This is serious stuff. Yeah, I suppose. I wonder when it is going to get bad enough that "the powers" decide that it is time to fundamentally redesign how eMail works. All of this stuff "inhales vigorously." Looking

Re: [NF] eMail flood on my server

2007-01-21 Thread Ed Leafe
On Jan 21, 2007, at 5:30 PM, Kenneth Kixmoeller/fh wrote: > It just seems like there are much easier ways to harvest eMail > addresses... hardly worth the programming time to do it this way. But > I suppose they are just having "fun." No, it's not for fun. This is serious stuff. And as lo

Re: [NF] eMail flood on my server

2007-01-21 Thread Kenneth Kixmoeller/fh
On Jan 21, 2007, at 12:34 PM, Ed Leafe wrote: > > A better question would be: what do they have to lose? Most likely > this is coming from a zombie that has been infected, so it doesn't > even cost them any CPU cycles or bandwidth. It just seems like there are much easier ways to harvest e

Re: [NF] eMail flood on my server

2007-01-21 Thread Kenneth Kixmoeller/fh
On Jan 21, 2007, at 1:22 PM, Whil Hentzen (Pro*) wrote: > If you look up the 'from' chain, you'll eventually see the starting > point of the email (the 'envelope', so to speak.) Are they all the > same > (probably likely) or different? Al I see on the server is the apparent "from" and IP. The

Re: [NF] eMail flood on my server

2007-01-21 Thread Whil Hentzen (Pro*)
Kenneth Kixmoeller/fh wrote: > Hey -= == == > > I'm just curious what's going on > > I flipped my KVM switch over to my server (for no particular reason), > and noticed my eMail server going wild. Somebody is sending mail > after mail to my server, to made-up users in my domain. the user

Re: [NF] eMail flood on my server

2007-01-21 Thread Ed Leafe
On Jan 21, 2007, at 1:12 PM, Kenneth Kixmoeller/fh wrote: > I just don't understand what somebody has to gain by flooding my > server? It's a spam bot. They keep generating all sorts of combinations, hoping that one or two will be legitimate. A better question would be: what