Jump to content

lbickley

Members
  • Content Count

    6
  • Joined

  • Last visited

Community Reputation

0 Neutral

About lbickley

  • Rank
    Newbie
  1. lbickley

    spamrl.com

    Many providers use "spamrl.com" to block spam emails from entering their systems. Unfortunately, spamrl scans an entire email to find ANY email address it considers spam - and bounces it back to the originator. I have reported over 20,000 spams over the years to SpamCop - but now many of my emails are being blocked by spamrl - because it detects a spammer's address in my attachment. This forces me to not use quick reporting but rather copy and paste to SpamCop directly. I have contacted spamrl.com directly and explained the problem to them - but they have been unresponsive. This issue also impacts attempts to send "phishing" email to folks who want to see them, like spoof@paypal.com. spamrl.com also blocks them because they "discover" phishing emails in ones attachment. Some of you may not know that spamrl.com is doing this to you - as it depends on how you handle "bounced" emails. Any ideas on how to deal with this (other than asking every mail ISP one uses to bypass spamrl for all one's email)?
  2. lbickley

    No IP Found

    Thank you! That was likely the issue. I recently changed my Web hosting vendor and primary email vendor - and forgot to update MailHosts! Just did the update - and expect that will solve my problem with "No IP". Cheers, Lyle
  3. lbickley

    No IP Found

    Correction to the above: "SpamCop analysis" should be "spam Assassin analysis" Lyle
  4. lbickley

    No IP Found

    I've been submitting spam to SPAMCOP for MANY years. Recently I've begun to get MANY results which state: ------------------------------------ No unique hostname found for source: xxx.xxx.xxx.xxx warning:Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust this Received line. error:No IP found or Hostname verified: trinity.trinityinternetservices.com warning:Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust this Received line. error:No IP found1 ------------------------------------- Whan I look at the message source, it contains the usual "received from", DKIM signature, received by ..., Subject, From, To, X-spam, SpamCop analysis, and HTML message. I can't remember seeing this message in the past - why is it happening now? Lyle
  5. I keep seeing statments about "I refuse to bother" about sites that have valid persons to bother! For instance, this recent: --------------------------- "Cached whois for 103.255.206.57 : helpdesk[at]apnic.net netops[at]apnic.net I refuse to bother helpdesk[at]apnic.net. warning:Using helpdesk#apnic.net[at]devnull.spamcop.net for statistical tracking. I refuse to bother netops[at]apnic.net. --------------------------- Yet when I do a whois on 103.255.206.57 I get the following: --------------------------- whois 103.255.206.57 % [whois.apnic.net] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html % Information related to '103.255.204.0 - 103.255.207.255' inetnum: 103.255.204.0 - 103.255.207.255 netname: FANSHALA descr: FANSHALA admin-c: MM1335-AP tech-c: NA342-AP country: IN mnt-by: MAINT-IN-IRINN mnt-irt: IRT-FANSHALA-IN mnt-routes: MAINT-IN-FANSHALA status: ASSIGNED PORTABLE changed: hm-changed[at]apnic.net 20140106 source: APNIC irt: IRT-FANSHALA-IN address: 71, DSIDC, Okhla Industrial Area, Phase-1 phone: +91 01141066522 fax-no: +91 01126819575 e-mail: support[at]fanshala.com abuse-mailbox: support[at]fanshala.com admin-c: MM1335-AP tech-c: NA342-AP auth: # Filtered mnt-by: MAINT-IN-FANSHALA changed: support[at]fanshala.com 20140106 source: APNIC role: Network Admin address: 71, DSIDC, Okhla Industrial Area, Phase-1 country: IN phone: +91 01141066522 fax-no: +91 01126819575 e-mail: admin[at]fanshala.com admin-c: MM1335-AP tech-c: MM1335-AP nic-hdl: NA342-AP remarks: send spam and abuse report to support[at]fanshala.com notify: support[at]fanshala.com abuse-mailbox: support[at]fanshala.com mnt-by: MAINT-IN-FANSHALA changed: support[at]fanshala.com 20140106 source: APNIC person: Mohit Madan address: 71, DSIDC, Okhla Industrial Area, Phase-1 country: IN phone: +91 01141066522 fax-no: +91 01126817595 e-mail: support[at]fanshala.com nic-hdl: MM1335-AP remarks: send spam and abuse report to support[at]fanshala.com notify: support[at]fanshala.com abuse-mailbox: support[at]fanshala.com mnt-by: MAINT-IN-FANSHALA changed: support[at]fanshala.com 20140106 source: APNIC % Information related to '103.255.204.0/22AS58904' route: 103.255.204.0/22 descr: FANSHALA - Route Object origin: AS58904 country: IN remarks: send spam and abuse report to support[at]fanshala.com notify: admin[at]koonk.com mnt-routes: MAINT-IN-IRINN mnt-by: MAINT-IN-IRINN changed: admin[at]koonk.com 20140715 source: APNIC ------------------------------------------------- More and more of my spams are receiving the "I refuse to bother" message. It looks like the spammers have figured out that they can safely hide at ISP's like APNIC - and know that they will not ever be "bothered" by SpamCop. There are plenty of other email addresses in the above WHOIS where reports can be sent. Let's make it happen!
  6. lbickley

    "No reporting addresses found"

    In response to a recent spam regarding: 37.151.196.190, I got the all too typical response of "whois.ripe.net 37.151.196.190 (nothing found), error:No reporting addresses found for 37.151.196.190, using devnull for tracking." I did a "whois -B 37.151.196.190", and got a set of new reporting names: "natalya.petrova[at]telecom.kz", "onekrasova[at]online.kz" and "akushner[at]online.kz". Have these been tried and have they "bounced"?
×