Jump to content
Sign in to follow this  
mrsbwayne

ARG! Mail is blocked! HELP!

Recommended Posts

You're business chose the bad neighborhood. Or, the neighborhood got bad around your business. As a business owner, you assume risks of ownership. You based your business on email communication, and thus (direct or implied) accepted the delivery risk that comes with email. You compounded this by not understanding how email really works, and what the full extent of the risks are.

I like this explanation also because it is absolutely true - online and offline.

Miss Betsy

Share this post


Link to post
Share on other sites

:( Help Please

My email address has been blocked can anyone assist me please as I am not that computer literate and don't know what to do - thanks

Share this post


Link to post
Share on other sites

:( Help Please

My email address has been blocked can anyone assist me please as I am not that computer literate and don't know what to do - thanks

You should contact the company you pay to send your email through (usually your ISP) and complain you are not getting what you paid for.

Your email address is likely not blocked (and especially not by spamcop). The IP address of the server you are using to send email is likely listed by spamcop and blocked by the server you are trying to send to.

Share this post


Link to post
Share on other sites
You should contact the company you pay to send your email through (usually your ISP) and complain you are not getting what you paid for.

Your email address is likely not blocked (and especially not by spamcop). The IP address of the server you are using to send email is likely listed by spamcop and blocked by the server you are trying to send to.

Hi Steven,

Thank you, it's public holiday here today, I am in the South Pacific and nobody from my ISP is answering the phone or email so that will have to wait until tomorrow, however when I sent a multi email, a reply came back saying that my email address was blocked by spamcop

thanks Jill

Share this post


Link to post
Share on other sites
Thank you, it's public holiday here today, I am in the South Pacific and nobody from my ISP is answering the phone or email so that will have to wait until tomorrow, however when I sent a multi email, a reply came back saying that my email address was blocked by spamcop

If you really received an message like that, the ISP involved needs a good whack. There are really too many other Topics/Discussions already existing in here in the same subject, so can't guess why you picked this one to post into ... but the question still remains .. did you actually read any of the previous dialog in this discussion (or any others? ... from appearances, you've not looked at the SpamCop FAQ here, or even the additionally, separately Pinned item Why Am I Blocked? SpamCop FAQ Entry ....

SpamCop.net does not have the power to "block your e-mail" .. and all concerned folks that would wish to help you out are still waiting for you to help us help you by identifying the critical data needed, the IP addresss of the outgoing e-mail server that your e-mail left from ..... there is no answer available beyond the FAQ data until you provide that missing data.

Share this post


Link to post
Share on other sites
when I sent a multi email, a reply came back saying that my email address was blocked by spamcop

If you are being blocked and your ISP is competent it means your computer is trojanised and is spewing spam. SpamCop only tries to "block" the actual computer sending the spam

I take it you have none of the windows (XP©) precautions listed in my signature? like virus detection with latest definitions or firewall? If not it means aside from spammers every thug on the planet can gain access to everything on your computer (where you live, when you are home, when you are not, photos etc)

Microsoft will give you for 3 months all of this (then it costs US$40 for 3 computers annually)

Microsoft Windows OneCare

You will also need to download

Defender another free Microsoft product

This works in conjuntion with Microsoft Windows OneCare

Share this post


Link to post
Share on other sites
Thank you, it's public holiday here today, I am in the South Pacific and nobody from my ISP is answering the phone or email so that will have to wait until tomorrow, however when I sent a multi email, a reply came back saying that my email address was blocked by spamcop

I am not quite sure that I understand what you mean by a 'multi email' - if that means that you are sending email to a mailing list, then you should understand the information in the FAQ Best Practices for Mailing Lists.

Basically, do you confirm subscriptions and is your removal mechanism working? Do you keep your list current?

If you post your IP address, then someone may be able to give you a hint at what the problem is. (your IP address is not the same as your email address. Your IP address will have many users unless you run a server.)

Miss Betsy

Share this post


Link to post
Share on other sites

I am not quite sure that I understand what you mean by a 'multi email' - if that means that you are sending email to a mailing list

Miss Betsy, I had missed that part. There are some IPS's who will limit the number of messages that can go out in one sending. I had that issue once (a couple years ago) helping someone change ISP's who insisted on using one of those "I've changed my address" tools offered by that ISP. However, they had a limit of 25 addresses per message.

Share this post


Link to post
Share on other sites

I'm blocked again. Oh, I know the spiel! Spamcop didn't do it, it's the ISP, it's the receiving email person, etc, etc. Brother. Good thing the spammers can still send mail, what would we do without them! If the actual spammers get blocked, they don't care, they just move on to a new server. It's people like me that get blocked and have to start complaing. Thanks Spamcop!

SW

Moderator Edit: Merged the "new" Topic-starting post into the previous massive Topic/Discussion, where apparently not a lot was 'learned' .... PM sent to advise of the Move/Merge ....

Share this post


Link to post
Share on other sites

Well it is not too suprising as the mail being sent from the IP address you posted this message from has increased by a factor of 17, specifically 1702% and now stands at a magnitude of 4.6 something like 50,000 messages in one day.

Additional information you may find helpful/interesting:

Looking for potential administrative email addresses for 209.181.18.177:

cannot find an mx for powell.directairnet.com

63.227.167.31 is an mx ( 30 ) for directairnet.com

So the IP address sending mail does not seem to have a registered MX - Definitely does not help your situation.

Listing History

In the past 56.6 days, it has been listed 5 times for a total of 5.2 days

And to quote from one of your previous posting

My question is: I am using directair.com for my ISP. I don't have any stmp mail things with them, all my mail accounts go with various websites that are hosted at ixwebhosting, domaindirect and storefront. The two affected accounts last week were the two ixwebhosting accounts. The email accounts are all mail.domainname.com Directair is just the ISP. I use outlook express if that means anything.
The problem might be that you have no idea of exactly what SMTP servers you are actually using to send your mail. Go into Outlook Express Account setup and check the outgoing SMTP server settings for each and every one of your registered accounts and take not to which account is set up as "default".

There are other possibilities, including, that being that mail is be tracked back to your connecting ISP IP address which is sending spam and not properly recording header information to be able to track the mail back past this point of connection.

Directair definitely needs to clean up their act.

But back to your being listed problem, without you posting a copy of the reject notice from one of your messages being block, all we can do is guess at exactly what SMTP server you are actually using to send mail and why it appears on the SpamCop list.

Is see that this post has been merged into your original topic while I was writing this reply.

One nice feature of the new software is that the posting data does now get saved instead of lost as before.

Share this post


Link to post
Share on other sites
I'm blocked again. Oh, I know the spiel! Spamcop didn't do it, it's the ISP, it's the receiving email person, etc, etc. Brother.

Based on the previous episode of this specific story, it would appear that "your guy" went on vacation again. As in the previous case, you fail to provide the real data needed to do any research, so am using some of the same details brought up the last time you felt like raising a rant without reading any of the responses and applying any of that newfound knowledge ...

http://www.senderbase.org/?searchBy=ipaddr...=209.181.18.177

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day ......... 4.6 .. 1701%

Last 30 days ... 2.9 .... -64%

Average ......... 3.3

The same symptoms as before .... one could assume the same "problem" as before ....

http://www.spamcop.net/w3m?action=checkblo...=209.181.18.177

209.181.18.177 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 11 hours.

Causes of listing

System has sent mail to SpamCop spam traps in the past week (spam traps are secret, no reports or evidence are provided by SpamCop)

SpamCop users have reported system as a source of spam less than 10 times in the past week

Good thing the spammers can still send mail, what would we do without them! If the actual spammers get blocked, they don't care, they just move on to a new server. It's people like me that get blocked and have to start complaing. Thanks Spamcop!

Yet again, in the data you seem to continue to ignore .... the item that made its way onto a BL is the IP address of the source of the spew traffic .. the only place "you" are blocked is when you attempt to send an e-mail to someone that is using the services of an ISP that has chosen to use that BL in a blocking fashion.

Yes, spammers refuse to play fair. Believe it or not, there are even spammers that make their way here, register an account, and try to spam folks here. Yet, there is a number of folks involved here that actually do something about at the first sign of a problem.. If you'd care to look around, you'll even find a number of 'success' stories from ISP/Admin folks that figured what was going on and managed to secure their e-mail servers against the spammer hack-ins, found the compromised computers on their network, etc. and on and on ....

Share this post


Link to post
Share on other sites

Actually it should be the users of Spamcop doing the thanks!

More pill spam.........

--------------------------------------------------------------------------------

Submitted: Sunday, July 02, 2006 8:32:55 AM -0400:

Mak3 yOur girlfri3nd happy, man h3alth Offers fOr a lOw price.

--------------------------------------------------------------------------------

Submitted: Saturday, July 01, 2006 4:38:16 PM -0400:

**spam** Generik Viagra =?UNKNOWN?Q?doesn=92t?= reduce Erectile Dysfunction, ...

--------------------------------------------------------------------------------

Looks like you are getting into more block lists.

Maybe you should fix your trojanned machine as it seems the spammers have more control of it than you do.

--------------------------------------------------------------------------------

CBL The CBL - Composite Blocking List: cbl.abuseat.org -> 127.0.0.2

Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=209.181.18.177

--------------------------------------------------------------------------------

XBL Exploits Block List (includes CBL): xbl.spamhaus.org -> 127.0.0.4

http://www.spamhaus.org/query/bl?ip=209.181.18.177

--------------------------------------------------------------------------------

SPAMCOP SpamCop Blocking List: bl.spamcop.net -> 127.0.0.2

Blocked - see http://www.spamcop.net/bl.shtml?209.181.18.177

--------------------------------------------------------------------------------

NOMOREFUNN local bl at moensted.dk: no-more-funn.moensted.dk -> 127.0.0.7

added 2002-04-11; spam support - netblk-q0228-65-125-188-0

--------------------------------------------------------------------------------

DNSBLAUT1 Reynolds Technology Type 1: t1.dnsbl.net.au -> 127.0.0.2

Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=209.181.18.177

--------------------------------------------------------------------------------

Share this post


Link to post
Share on other sites

PM sent:

Subject: your last post

was merged into your existing Topic/Discussion as it would appear to be the same problem happening once again. This "new" post is now foind at the end of http://forum.spamcop.net/forums/index.php?...=6403&st=60 And again, you failed to provide the specific details, so there is a bit of guessing going on yet again .... you never did follow up the last time in regards to the configuration of your OE and the actual accounts used to "send" e-mail ... there was never an acknowledgement of what your ISP actually did, other than the statement that "they didn't have a clue as to what happened" .... yet, it appears to be happening again ...

I fail to grasp how so many people tried in so many different ways to describe the situation to you, how things work, the actual impact of a BL listing, who is actually responsible, yet .... you're back again and making the same strange accusations. I'd ask that you try again to start from the beginning and actually read 'all' the discussion that has transpired on your situation ... answer some more of the questions posed, provide feedback on what you did do on some of the suggestions/recommendations offered before, try again with your ISP folks and this time try to get a "real" answer .. point them to this discssion for starters.

Share this post


Link to post
Share on other sites

After checking it looks like you have the same problem on a couple machines:

63.227.167.31

Last day 4.3 1066%

Last 30 days 2.9 -56%

Submitted: Sunday, July 02, 2006 8:32:55 AM -0400:

Mak3 yOur girlfri3nd happy, man h3alth Offers fOr a lOw price.

209.181.18.177

Last day 4.6 1705%

Last 30 days 2.9 -64%

Details in above post for this IP.

The 209 one might not be yours but it also belongs to your provider. Hopefully the info will assist them.

Edited by Merlyn

Share this post


Link to post
Share on other sites

Looks like 209.181.18.177 is blocked again!

Last day 4.5 1464%

Last 30 days 3.0 -50%

More penis spam, is it time to unplug that trojanned machine from the internet?

Share this post


Link to post
Share on other sites

3 Jul 2006 1440 GMT -5

http://www.senderbase.org/?searchBy=ipaddr...=209.181.18.177

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day ......... 4.4 .. 1181%

Last 30 days ... 3.1 .... -43%

Average ......... 3.3

4 Jul 2005 0010 GMT-5

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day ........ 4.4 .. 1194%

Last 30 days .. 3.1 -... 40%

Average ........ 3.3

4 Jul 2006 0812 GMT -5

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day ........ 4.1 .. 441%

Last 30 days .. 3.1 ... -39%

Average ........ 3.3

Seeing as no one allegedly 'fixed' anything the last time, mrsbwayne has once again not seen her way clear to provide any feedback, and there is nothing here from the ISP involved .. not much else to go on other than perhaps the user with the infected computer turned it off for some reason ... or the spammer saw a reason to move operations elsewhere, assumedly while waiting for this ISP's system to drop of the various BL's ...?????

4 Jul 2006 1205 GMT -5

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day ........ 4.1 .. 442%

Last 30 days .. 3.1 .. -39%

Average ........ 3.3

Share this post


Link to post
Share on other sites

It's going down:

Report on IP address: 209.181.18.177

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day 4.1 441%

Last 30 days 3.1 -39%

Average 3.3

Share this post


Link to post
Share on other sites

More from yesterday:

209.181.18.177

--------------------------------------------------------------

Submitted: Monday, July 03, 2006 9:17:08 AM -0400:

Aff0rdablE mEdicinE dirEctly fr0m manufacturEr

--------------------------------------------------------------

Submitted: Monday, July 03, 2006 9:14:15 AM -0400:

*Junk EMail* Ripe teen pussy gets stuffed with cock

--------------------------------------------------------------

Currently (July 4):

209.181.18.177 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 23 hours.

Share this post


Link to post
Share on other sites

You can see how upset she is with Spamcop and all the self-rightous IDIOTS here at http://mrsbwayne.livejournal.com/ under the Sunday, May 21st, 2006 entry. :D

So I would assume she has no control over the server and the problem stands directly to the lack of knowledge of her admins at directairnet.com for running this trojanned machine.

Edited by Merlyn

Share this post


Link to post
Share on other sites

Well, who knows, maybe only Idiots believe that one should understand how email actually works in the real world before depending upon it as your primary means of business communication; if so, I guess that I am one of those idiots. Thanks Merlyn for posting the link. An "interesting" point of view.

So I would assume she has no control over the server and the problem stands directly to the lack of knowledge of her admins at directairnet.com for running this trojanned machine.
Or possibly simply someone tapping into her wireless connection and using it dump their spam on the internet.

Share this post


Link to post
Share on other sites

Or possibly simply someone tapping into her wireless connection and using it dump their spam on the internet.

Good point!

Share this post


Link to post
Share on other sites
You can see how upset she is with Spamcop and all the self-rightous IDIOTS here at http://mrsbwayne.livejournal.com/ under the Sunday, May 21st, 2006 entry. :D

Couldn't help it .... posted a Comment there ..... looks like the URL is http://mrsbwayne.livejournal.com/21639.html

SpamCop.net help

(Anonymous)

2006-07-04 05:03 pm UTC (link)

The entire episode is found at http://forum.spamcop.net/forums/index.php?showtopic=6403 ... If one reads through all that stuff, one would see that there were a number of folks trying to help out, explain how things works, offer siggestions, even trying to help her reconfigure her Outlook Express tool. And strangely enough, even after all of that effort, time, and knowledge passed, her ISP has yet again lost control of that e-mail server (actually, multiple e-mail servers as it turns out) but it's all the fault of the IDIOTS at SpamCop.net(????)

And for the uninitiated, SpamCop.net does not have the power to "block her e-mail" ..... Her e-mail was blocked by the receiving ISP that has chosen to use the SpamCopDNSBL in a "blocking" fashion (which is even against the recommendations of SpamCop.net) .... the SpamCopDNSBL is but one of the hundreds and hundreds of BlockingLists available for use by any ISP/Admin as a tool to stop incoming spam spew.

WazoO - one of the IDIOTS that has tried to help

Odd timestamp ...?????

Share this post


Link to post
Share on other sites

Gads, talk about lifeless! You actually looked me up on the internet! I'd be flattered, but who cares.

Why don't you use your sleuthing skills and figure out a better way to block spammers? Because this crap doesn't work!

SW

Share this post


Link to post
Share on other sites
Why don't you use your sleuthing skills and figure out a better way to block spammers? Because this crap doesn't work!

Quite on the other hand, those ISPs using the BL in a blocking mode managed to keep the spew coming from "your" e-mail server off their systems and out of their customer's InBoxes ..... those ISPs that use the BL in a Tagging / Filtering mode had the flagged notification that "your" server was spewing out loads of bad stuff .... Sorry, but as stated a number of times before, a whole lot of things are working "right" ...

BTW: it appears that "your guy" must have checked in at the office .....

http://www.senderbase.org/?searchBy=ipaddr...=209.181.18.177

Volume Statistics for this IP

Magnitude Vol Change vs. Average

Last day ........ 3.2 .. -35%

Last 30 days .. 3.1 .. -39%

Average ........ 3.3

http://www.spamcop.net/w3m?action=checkblo...=209.181.18.177

209.181.18.177 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 14 hours.

Share this post


Link to post
Share on other sites

Back on and back up!

Last day 4.5 1162%

Last 30 days 3.3 -21%

209.181.18.177 listed in bl.spamcop.net (127.0.0.2)

If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 18 hours.

I can't believe directairnet.com is allowing this penis pill spam to continue to abuse thier services.

-------------------------------------------------------------------------------

Submitted: Wednesday, July 05, 2006 8:12:38 PM -0400:

Need medicine? All here!

--------------------------------------------------------------------------------

Submitted: Wednesday, July 05, 2006 8:06:35 PM -0400:

Best love dr[at]gs at best store!

--------------------------------------------------------------------------------

Submitted: Wednesday, July 05, 2006 8:44:38 AM -0400:

Any med for your girl to be happy!

--------------------------------------------------------------------------------

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×