Jump to content

hbutz

Members
  • Content Count

    10
  • Joined

  • Last visited

Posts posted by hbutz


  1. Thanks for the clarification Henry, this belongs in the SpamCop Email System & Accounts forum where other users who know that system can respond. Alas, I am not one. Moving it there with this post. [edit - beaten by Wazoo who was nowhere to be seen but, like a stooping falcon, snatched it away while I was yet fumbling with the controls. Ah well.]

    I can confirm the countries.nerd.dk blocklist is functioning exactly as they said it does for that IP address. For a Windows system you can check that, for any IP address, from the command prompt with nslookup, any time you want. I can tell you how if you want. It seems to me that if the message was moved from your inbox to your held mail (is that what you are saying?) then the filtering is working and something in your filters or SpamAssasin did that (that is before it got to the blacklist.china). But I don't use the mail system so I'm just supposing. If that message was in your inbox (was it?) then I am completely off target.

    Someone who knows will answer, when they can.

    Here is what I have observed. In webmail.spamcop.net, inbox, I saw a spam email. I manually moved it to my held mail folder. Then, from mailsc.spamcop.net I looked at held mail. It displayed () meaning that the email was not recognized as being associated with any blacklist. I processed the spam and it told me that the originating IP was 116.1.100.251. This IP should have been blocked by China country blacklist, but instead it appeared in my inbox.

    This is independent of the operating system I am using. I am using webmail.spamcop.net. I was just curious as to why it was not held in my held mail folder since the China blacklist is functioning?


  2. Hi, Henry!

    ...Personally, I don't think I can help you but I'm pretty sure that those that might be able to do so will need some additional information. I'd suggest you look at [How-to] Post a Question (and prevent stupid/rude answers). Also helpful will be for you to tell us what Operating System software and version and e-mail client software and version you are using.

    Hi,

    This is in regard to the blacklist filtering on Spamcop which is independent of my email software. I am looking at my held mail folder vs my inbox folder at webmail.spamcop.net. Held email displays the reason why it is held in (parenthesis). I had expected email from the IP address of China to display (blacklist.china), but instead it displayed () nothing.

    Henry


  3. I subscribe to the China country blocklist, yet received spam unfiltered from 116.1.100.251. This IP is in China. I received a quick response from the owner of the list after explaining the problem. He says,

    Then check your setup, it resolves as it should:

    apj[at]zaphod:~$ host -t any 251.100.1.116.zz.countries.nerd.dk

    251.100.1.116.zz.countries.nerd.dk descriptive text "cn"

    251.100.1.116.zz.countries.nerd.dk has address 127.0.0.156

    apj[at]zaphod:~$ host -t any 251.100.1.116.cn.countries.nerd.dk

    251.100.1.116.cn.countries.nerd.dk descriptive text "Your IP is in cn, rejected based on geographical location"

    251.100.1.116.cn.countries.nerd.dk has address 127.0.0.2

    Henry


  4. I probably fall into the minority here. I usually report spam one at a time using a detailed analysis, rather than just selecting dozens at a time. There is a bug in the detailed analysis which has gone unresolved for many months. The output will say "Resolving link obfuscation" then not resolve anything.

    The only way to force Spamcop to resolve to the link is to reload, often several times until it finally resolves the link. Attached is a screen snapshot of the software not doing what it is supposed to do.

    Moderator Edit: off-site link removed.


  5. I am reading a previous issue which appears to address my problem,

    http://forum.spamcop.net/forums/lofiversio....php/t3060.html

    Possible forgery. Supposed receiving system not as

    I just activated the Mailhosts system. It appears to be working fine, but I have lost the ability to manually parse spoof emails - that is, bounced spam messages from a spammer using my email address.

    Although Spamcop does not allow the reporting of spoof emails, I would like to manually parse the header to find out who is responsible. I have completely lost this ability, after switching to mailhosts. I receive the following error messages:

    Possible forgery. Supposed receiving system not associated with any of your mailhosts

    Will not trust anything beyond this header

    No source IP address found, cannot proceed.

    Nothing to do.

    Spamcop does not give me any useful information, leaving me blind and crippled. How about just telling me where the spam is coming from, then not sending any reports since my mailhost was not found in the header? I feel I have lost a valuable tool.


  6. I received a clueless response to a spamcop report. However, the response should have been whitelisted, not placed in my held mail folder (as per Don). I rely on the proper filtering of email i.e. if something is in my held mail folder, and it is from India, and the return address is "anujvaijapurkar[at]yahoo.com" then it is spam.

    The exception to this is when someone uses a free email account to respond to Spamcop report, telling me the spam in my inbox is not spam. This needs to be filed in my trashbin. I accidently reported the response as spam.

    We are moving into a new era post-CanSpam Act and they lines are getting a bit grey. I expect to be receiving more protests like this one.

    Can we adjust the whitelist filters to make sure that responses to spam complaints are not put in the held mail folder? Thanks,

    Henry

    Return-Path: <spamcop[at]devnull.spamcop.net>

    Delivered-To: x

    Received: (qmail 31140 invoked from network); 13 Aug 2004 05:50:30 -0000

    Received: from unknown (192.168.1.101)

      by blade2.cesmail.net with QMQP; 13 Aug 2004 05:50:30 -0000

    Received: from vmx1.spamcop.net (64.74.133.248)

      by mailgate.cesmail.net with SMTP; 13 Aug 2004 05:50:30 -0000

    Received: from unknown (HELO spamcop.net) (192.168.19.202)

      by vmx1.spamcop.net with SMTP; 12 Aug 2004 22:50:31 -0700

    X-SpamCop-Return-Path: <anujvaijapurkar[at]yahoo.com>

    Return-Path: <anujvaijapurkar[at]yahoo.com>

    Received: from vmx1.spamcop.net (sc-smtp1.eq.ironport.com [192.168.18.81])

    by sc-app2.eq.ironport.com (Postfix) with ESMTP id 86D40515933

    for <1170938226[at]reports.spamcop.net>; Thu, 12 Aug 2004 22:49:08 -0700 (PDT)

    Received: from web14523.mail.yahoo.com (216.136.224.52)

      by vmx1.spamcop.net with SMTP; 12 Aug 2004 22:49:10 -0700

    Message-ID: <20040813054908.82580.qmail[at]web14523.mail.yahoo.com>

    Received: from [61.11.7.226] by web14523.mail.yahoo.com via HTTP; Thu, 12 Aug 2004 22:49:08 PDT

    Date: Thu, 12 Aug 2004 22:49:08 -0700 (PDT)

    From: Anuj Vaijapurkar <anujvaijapurkar[at]yahoo.com>

    Subject: [spamCop id:1170938226 (http://www.indiaeye.com/resto.htm)]

    To: 1170938226[at]reports.spamcop.net

    MIME-Version: 1.0

    Content-Type: multipart/alternative; boundary="0-496618415-1092376148=:81824"

    X-spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on blade2.cesmail.net

    X-spam-Level:

    X-spam-Status: hits=-98.8 tests=DEAR_SOMETHING,HTML_MESSAGE,

    USER_IN_WHITELIST_TO version=2.64

    X-SpamCop-Checked: 192.168.1.101 64.74.133.248 192.168.19.202 192.168.18.81 216.136.224.52 61.11.7.226

    X-SpamCop-Disposition: Blocked list.dsbl.org

    --0-496618415-1092376148=:81824

    Content-Type: text/plain; charset=us-ascii

    Dear Sir or Madam,

    This is to inform you that the mails that are sent via the specified ip. 202.60.149.244 or

    http://www.indiaeye.com/resto.htm is not a spam.

    This mail also contains a clear declaration that we are following the US Laws in this regards. As the full & valid contact details are mentioned in this mail, it can not be considered as spam.

    I request you to do the needful.

    Thanking you,

    Anuj D.Vaijapurkar.

    Manager - Graphic Arts Div.

    Third Eye Consultancy

    #811, First Floor, 23rd Main,

    12th cross, J P Nagar II Phase,

    Bangalore 560078.

    Ph # 91 80 26594657/ 91 80 26594655

    Fax # 91 80 25918663 / 25918655

    INDIA

     

    ---------------------------------

    Do you Yahoo!?

    Yahoo! Mail is new and improved - Check it out!

    --0-496618415-1092376148=:81824

    Content-Type: text/html; charset=us-ascii

    <DIV>

    <DIV>Dear Sir or Madam,</DIV>

    <DIV> </DIV>

    <DIV>This is to inform you that the mails that are sent via the specified ip. 202.60.149.244 or </DIV>

    <DIV><A href="http://www.indiaeye.com/resto.htm">http://www.indiaeye.com/resto.htm</A> is not a spam.</DIV>

    <DIV> </DIV>

    <DIV>This mail also contains a clear declaration that we are following the US Laws in this regards. As the full & valid contact details are mentioned in this mail, it can not be considered as spam.</DIV>

    <DIV> </DIV>

    <DIV>I request you to do the needful.</DIV>

    <DIV> </DIV>

    <DIV>Thanking you,</DIV>

    <DIV> </DIV>

    <DIV>Anuj D.Vaijapurkar.</DIV>

    <DIV>Manager - Graphic Arts Div.<BR>Third Eye Consultancy<BR>#811, First Floor, 23rd Main,<BR>12th cross, J P Nagar II Phase,<BR>Bangalore 560078.<BR>Ph # 91 80 26594657/ 91 80 26594655<BR>Fax # 91 80 25918663 / 25918655<BR>INDIA<BR></DIV></DIV><p>

      <hr size=1>Do you Yahoo!?<br>

    Yahoo! Mail is new and improved - <a href="http://us.rd.yahoo.com/mail_us/taglines/new/*http://promotions.yahoo.com/new_mail">Check it out!</a>

    --0-496618415-1092376148=:81824--

×