sifuhall 0 Posted February 7, 2006 Hello. My server (67.15.24.4) pepperjack.pepperjack.com has been added to the blocked list today. As suggested I went to the site http://psbl.surriel.com and found that the problem seems to be spamtrap mail. If one of the clients on my box is sending spam I will certainly get rid of them. Our smtp server does require login before sending or receiving email, so hopefully I can track the person and identify which domain it is coming from. Where should I begin? I am new to spam tracking. Share this post Link to post Share on other sites
Farelf 0 Posted February 7, 2006 (edited) ... Where should I begin? I am new to spam tracking.40133[/snapback] Hi, you are right to try to fix it - although your IP address will have timed off "shortly" you will be back on the list soon enough, going by history. You might contact the Deputies who may be able to supply subject lines or something to help identify the source - (from SpamCop FAQ http://www.spamcop.net/fom-serve/cache/75.html) as in http://www.spamcop.net/fom-serve/cache/91.html. You will need to be one of the administrators identified down the page in http://www.spamcop.net/w3m?action=checkblock&ip=+67.15.24.4 (but don't request delisting yet of course - you only get one shot). Not sure where your link came from but my previous link certainly confirms(ed) spam trap hits as the cause of listing. Edited February 7, 2006 by Farelf Share this post Link to post Share on other sites
Wazoo 0 Posted February 7, 2006 My server (67.15.24.4) pepperjack.pepperjack.com has been added to the blocked list today. As suggested I went to the site http://psbl.surriel.com and found that the problem seems to be spamtrap mail. Where should I begin? I am new to spam tracking. 40133[/snapback] Well, you found evidence of spamtrap hits on another system that has no connection to SpamCop.net, so it's pretty apparent that yes, there is a spew issue. However, te question then becomes, did you follow the links on that site to check the "evidence" .???? http://psbl.surriel.com/evidence?ip=67.15....=Check+evidence shows two entries at present .... header data doesn't look good .... Share this post Link to post Share on other sites
Farelf 0 Posted February 7, 2006 ... header data doesn't look good .... 40140[/snapback] And the body looks worse. What a great resource psbl.surriel.com is! Can't rely on hits on the psbl spam traps at the same time as the SCBL ones, even so ... I would point out that the evidence from the psbl is far more complete than anything the SC Deputies are likely to release. Share this post Link to post Share on other sites
Jeff G. 0 Posted February 7, 2006 Report History shows 10-20 hits, all to Spamtraps. Asking the Deputies via deputies[at]spamcop.net is definitely the way to go. Share this post Link to post Share on other sites
sifuhall 0 Posted February 7, 2006 Thanks everyone! With your help I was able to find the offending domain (fuzzydragonmartialartssupplies.com) and the client was running OSCommerce. With just a small amount of research I was able to find that OSCommerce was susceptable to spammers. We have addressed this issue and hopefully this will no longer be a problem. Thanks again, you guys are the best! Share this post Link to post Share on other sites
agsteele 0 Posted February 7, 2006 We have addressed this issue and hopefully this will no longer be a problem.40171[/snapback] Thanks for your positive attempts to stop the flow of spam and helpful attitude. Much appreciated. Andrew Share this post Link to post Share on other sites