Jump to content

Lukas

Members
  • Posts

    29
  • Joined

  • Last visited

Posts posted by Lukas

  1. why look so far?

    couldn't we just get the Spamcop-internal list of "devnulled" addresses

    (refusing spamcop reports for one reason or another).

    As a new Blocklist? (This exists anyway in the spamcop system. Should only be accessible from webmail to be selected as a Blocklist...)

    I'd really like to block all those. Don't think they send any legit Email to me...

    But they send more and more spam which is not caught by the other lists...

    Thank you

    Lukas

  2. I still wait for the implementation of a new feature to prevent this... (IP's from my Mailhost-List should never be the reason to tag/hold a message as spam even if they are on the SCBL) ...but I know it's a bit hard to implement.
    ???? and you heard this where?

    I didn't hear it. I just hope for implementation. (and therefore mention it once a year...)

    My ISP's mailservers are on the SCBL from time to time. If this occurs my mails aren't filtered any more. (They are simply all held as spam because they contain a listed IP)

    Whitelisting this IP wouldn't help either (causing all mails to be whitelisted)

    But I'd like the mails just to be filtered normally, ignoring this specific IP.

    A new kind of 'ignore-IP-list' would be needed. (IP's not to be checked against blacklists and to be ignored in the whole process - I could also enter them manually allthough they might be identical to my mailhost list.)

    As StevenUnderwood mentioned, not impossible to implement...

    (better check the ignore-list first)

    In fact this could even save some time in the whole process of checking: the IP's of my ignore-list (to be checked in this rather short new list) won't be checked against the (very big and slow :) ) SCBL any more.

    Lukas

  3. We can then look up that IP and try to see why it might be on the SCBL. If all the messages that are being forwarded to your SC email address from the "net4all" system are being Held, then you should look at this FAQ page:

    in this case you might want to cancel the forwarding process and use POP instead.

    (Let spamcop POP the mail from your server. Then they don't pass through the forwarding SMTP-server of "net4all")

    Lukas

    I still wait for the implementation of a new feature to prevent this...

    (IP's from my Mailhost-List should never be the reason to tag/hold a message as spam even if they are on the SCBL)

    ...but I know it's a bit hard to implement.

  4. spam seems to be sent to my secret reporting address (submit.<verysecretcode>[at]spam.spamcop.net)

    (it startet about 3 weeks ago, reasons unknown. But I found a worm on a computer where this address was stored, might have escaped there...)

    Now I get AutoResponder-Error messages:

    SpamCop encountered errors while saving spam for processing:

    SpamCop could not find your spam message in this email:

    with detailed information

    the email which triggered this auto-response had the following headers:...

    Am I allowed to report the original messages? (I have header and body of the message. The secret reporting address is mine, therefore its my spam...)

    Actually reporting is not possible as

    Supposed receiving system not associated with any of your mailhosts

    Could I add spam.spamcop.net to my mailhosts? (In order to report those messages)

    Technically I think it would be possible as the mailhost-configuration would also trigger an error message with all needed informations.

    Anyone already done this or any Admin's oppinion?

    Lukas

    (It would also help if I could just switch off the AutoResponder. I usually report from webmail or with copy/paste. I don't need the secret reporting address often...)

  5. ...FWIW, I have seen the same as john1000. It does seem to be related to SpamCop.net down situations and/or the dreaded "putRow" problem.

    34940[/snapback]

    me too.

    either the can't login, "No userid" with "putRow" error or the text rendered page (html source)

    for the last hour it was not possible to login...

    hope they didn't mean to have a maintainance window till 12/25/2005 :)

    Lukas

  6. It would appear that the SpamCop address database has been harvested by some junk email company

    34478[/snapback]

    True. Not the database, but some of the reports.

    I never used my SpamCop-address openly. I only forward to it and use it to report spam. (But I don't munge the reports).

    I get some spam directly addressed to my SpamCop-address which nobody should know.

    (even if I search the web for my SpamCop-address I find a few copies of reports to ISPs mentioning this address.)

    But in fact I don't care much. - SpamCop filters work quite good for me. And it must be a very dumb spammer to harvest SpamCop-mailaddresses and send spam to those. Probably they want their IP to be blocked as fast as possible...

    Lukas

  7. Today I reported my spam as usual (from webmail / folder held mail / check all / Report as spam).

    After the usual delay I got the Email with "SpamCop Quick reporting data" which looked like this:

    SpamCop.net
    Here are the results of your submission:
    
       Processing spam:   From: 
       Subject: 
       
       error:No IP found
       Processing spam:   From: 
       Subject: 
       
       error:No IP found ...
    

    It seems there is something broken between webmail and reporting... (But as I could report normally with copy/paste into the form I assume this is a webmail problem.)

    Some of the spam concerned was fetched from external POP servers, some was directly addressed to my cesmail.net-account.

    I reported 35 messages about 6 hours ago

    and 3 messages some minutes ago. (with identical results)

    (I assume most of them had correct and parsable headers. It was my whole spamload from 24hours, looking quite average...)

    If anybody can reproduce this behaviour somebody might have to look into it.

    Lukas

    (No problem for me. I'll just try to report again tomorrow and hope the msgs parse better then...)

    *EDIT*Merged this over here for now though might move it back to Email forum if the tide turns that way.

    PM sent to Lucas to inform of the change.

  8. For Individual SpamCop Email System Accounts, the renewal notice goes to the Account's email address.  You'd have to ask JT about the notices for Family and Business Accounts.

    30444[/snapback]

    For Family Accounts each accout receives a notice to renew.

    Any of them can then login and renew for all accounts in one step.

    (just what I did this week)

    Lukas

  9. So let's review. Another customer of the company that hosts my domain sent

    out spam. spam Cop added that server to bl.spamcop.net. I have my e-mail

    account on that server forwarding all e-mail to spam Cop (which is suggested

    in the spam Cop documentation). Since the server doing the forwarding is now

    in bl.spamcop.net, every single e-mail that is forwarded gets blocked.

    30062[/snapback]

    I had the same problem. But my host (verio) got better in the last months, almost no listings and for hours only, not for days...

    Solution: Let spam Cop POP your account (instead of forwarding). Then the e-mails don't have your domain's OUTGOING smtp-IP in the header and don't get blocked. Worked quite well for me. - Of course this delays your mails for about 15 min and adds to the workload of the servers, but ...

    (When my hosts INCOMING smtp-IP get listed I still have the problem. To use the same IP for inbound and outbound traffic is "part of their anti-spam-politics and can not be changed" :rolleyes: )

    Lukas

  10. nonetheless, this spammer  has somehow gotten my E-mail address and appears to be willing to allow me to remove myself from their list. If they were beaten up over this by SpamCop, wouldn't this be a logical thing to do. I guess only time will tell if indeed they were being co-operative?

    29936[/snapback]

    No. If they really take SpamCop serious, they simply remove you from their list. (Just to avoid further reports). No need for a confirmation...

    Lukas

  11. If SpamCop cannot connect it won't report (SpamCop tries to err on the side of caution)

    this is what a safe browser from SamSpade see's

    I just wondered why SpamCop has only about 50% chances to resolve the link... And I always thought link-resolving to be a bit more constant and predictable...

    You can however report these URL's yourself if you have time and think there is a need to (The site is in german and even the translation makes little sense to me Seems to be an imigration site?)

    I did report them myself.

    Not exactly imigration. - Todays Nazis in Germany. They just tell about (mostly minor and rather irrelevant) cases of official autohritys treating imigrants slightly better than their own people. They don't tell more (which would break some laws.)

    Whenever this kind of spam outbreaks I get hundreds of them, probably through compromised machines (to randomaddresses[at]mydomain.ch)

    Lukas

  12. Today I reported this (full report)

    http://www.spamcop.net/sc?id=z763693994zcc...390f91f5241fbez

    (I usually quick-report but wanted the link reported...)

    The parser could not resolve the link.

    When I look at the parse and keep refreshing the screen the parser can sometimes resolve the link (reports would be sent to: schlund.de) and sometimes not.

    A temporary parser hiccup?

    Or is link resolving as random as it seems in this case?

    Lukas

  13. SpamCop Quick Reporting within Webmail:

    1. Login to Webmail. You can report spam from your Inbox or the Held Mail folder (or any other folder if you need to...)

    2. Check the boxes to select all the spam (messages) you want to report. You can use the checkbox in the top left corner of the matrix (under "Delete") to check all messages in the folder. (shortcut Alt+N or Alt+K, depending on the current folder...)

    3. Click the "Report as spam" link.

    4. The messages will be reported to SpamCop and deleted. (Quick Reports, reporting only the source of the messages, not the spamvertised links.) You'll get one or more (depending on the number of messages reported) "SpamCop Quick reporting data" email messages (to your Inbox) containing details of the reporting action, including a Tracking URL and the addresses to which reports were sent.

    Recommendations:

    - If you do use Quick Reporting, be sure to look at the reports (at least from time to time) just in case the parser hiccups so you can correct any errors.

    - Be sure to have configured your mailhosts correctly. This should prevent you from reporting your own ISP.

    If Quick Reporting is not enabled: (This is the default configuration.)

    Steps 1.-3. as above.

    4. You will get back an email message with the subject "SpamCop has accepted X email for processing" containing links to your reporting page. You'll have to complete each report manually. Review your reports carefully.

    (See How to use: Reporting within webmail for details.)

  14. Think you meant to point at Jeff G.'s Guide to SpamCop Quick Reporting ... noting that Jeff G. wrote that up using the tools and knowledge he'd developed. 

    the FAQs indeed are very poor on this subject. spam Cop FAQ / Mail Service only mentions what you should report but not how.

    Jeff G.'s Guide contains the necessary steps but is a bit overloaded for this problem.

    So I contracted it to a new

    Guide to spam Cop Quick Reporting within Webmail:

    1. Login to Webmail. You can report spam from your inbox or the Held Mail folder (or any other folder if you need to...)

    2. Check the boxes to select all the spam (messages) you want to report. You can use the checkbox in the top left corner of the matrix (under "Delete") to check all messages in the folder. (shortcut removed - it may be Alt+N or Alt+K, depending on the current folder...)

    3. Click the "Report as spam" link. The messages will be reported to SpamCop and deleted. (Quick Reports, reporting only the source of the messages, not the spamvertised links.)

    4. You'll get one or more (depending on the number of messages reported) "SpamCop Quick reporting data" email message (to your Inbox) containing details of the reporting action, including a Tracking URL and the addresses to which reports were sent.

    Recommendations:

    - If you do use Quick Reporting, be sure to look at the reports (at least from time to time) you get back just in case the parser hiccups so you can correct any errors.

    - Be sure to have configured your mailhosts correctly. This will prevent you from reporting your own ISP.

    BTW: I think Jeff G's Guide is not up to date with the keyboard shortcuts...

    Oops. - The topic is also covered here: How to use: Reporting within webmail

    My guide only works if Quick Reporting is enabled...

    Lukas

  15. When I log onto outlook remotely (at home) I receive my mail just like from the office. However, I am not able to send email remotely using Outlook. Is there  a setting within Outlook that will allow me to do this?

    25077[/snapback]

    Hard to say as you don't provide enough informations... Probably you want to do this:

    work: Outook downloads (pop) mails from spamcop. Outlook sends email through a smtp-server where you work.

    home: Outlook downloads mails from spamcop.

    As Spamcop does not provide any smtp (outbound) mailservers you can't send mails through spamcop.

    You could use webmail.spamcop.net and send mails from your browser instead of Outlook.

    Or you need any outbound (SMTP) mailservice. (Could be your work allowing this, your ISP or any other Email-provider)

    Lukas

  16. How do I get it to STOP filtering 65.173.133.16 --

    that's MY server, and I assure you we are NOT spammers.

    This would be a New Feature Request.

    (I have the same problem: my ISP is listed from time to time causing all emails to be held by spamcop.)

    3.Do the applied blocklists apply, send it to the Held Mail folder.

    should be modified with

    IPs of my mailhosts (from the mailhost configuration or a personal list) should not be checked in this step.

    Lukas

  17. I'm a bit confused as to where to go from here so my legit e-mail doesn't keep getting held up. Any suggestions?

    If you still have the problem, try not to forward your e-mails to spamcop. Let spamcop POP them from your mailserver.

    FORWARDING adds your providers IP to the headers. If this IP is listed everything is blocked.

    POP does not add your poviders IP to the headers. But it delays your emails (about 15 min) and gives some extra work for the spamcop servers. (Checking your account for new mails about 4 times an hour).

    Lukas

    I still hope for spamcop to implement some kind of whitelist to prevent this problem: A list of my providers IPs that should not be the reason for any mail to be held.... (Could probably be the same list like my mailhosts...)

  18. 3. "personal ip whitelist" would keep us from reporting our own mailservers

    from Held Mail,

    21603[/snapback]

    this should also have the effect of a anti-blacklist :)

    (a message should not be held because of a blacklisted ip from my personal whitelist)

    some mailservers of my ISP are blacklisted from time to time. Only for a few hours and only by error as my ISP claims... but if they are on the SCBL all my mail is held with all the other spam.

    (messages with other listed IPs could still be held.)

    Lukas

  19. I'm guessing that it's that incoming e-mail is moved to the Held Folder vice remaining in the InBox based on the IP of the Forwarding server finding its way on the / a BL .... but noting that this seems to also invoke some assumptions that all e-mail forwarded is "good" ...????

    18280[/snapback]

    Correct. (I confused the terms "blocking" and "move to the Held Folder"...)

    When the IP of my ISP is blacklisted all incoming e-mail is moved to the Held Folder based on the forwarding IP.

    Not all the forwarded e-mail is "good", but I want Spamcop to filter my e-mails (which it does quite successfully...)

    In this filtering process Spamcop should just ignore the forwarding IP:

    If the header contains another blacklisted IP it's (probably) "bad" and should be held. Otherwise it's (probably) "good"...

    As long as this feature is not available there is another advantage of pop vs. forwarding: This does not add my ISP's IP to the mail header. (And does not move my "good" e-mail to the Held Folder...)

    I hope this was clear now...

    :)

    Lukas

  20. My present settings are SC pops my mail from my ISP Webmail, then my email client here pops from SC to my Inbox.

    Is it better to set my ISP's webmail to forward to my SC email addy inbox instead? (Keeping the pop to inbox as is.) :blink:

    17857[/snapback]

    I prefer to pop...

    My ISP gets on the blacklist from time to time. (About once a month, only by "error", usually not longer than 24 hours.) - But when I forwarded my mails to SC everything got held because of the (outgoing) IP of my ISP...

    (I still wait for the "personal non-blacklist" of IP's which should never be the reason to block my mails...)

    Lukas

  21. The mailhosts is a function of the Reporting system, while the mail is held by the mail system.  The mail system can't see your settings in the reporting system, so this isn't possible and vice versa

    Oh well, then I guess there isn't anything that can be done about it. That's a shame :rolleyes:

    why not. - It could also be a personal option in the mail system.

    A list of IP's of my own ISP that should not be the reason to mark my emails as spam.

    Something like a Non-Blacklist. Would be easy...

    (I'm having the same problem. My ISP was only listed 2 times by accident (6-12 hours each time). But still all my Emails being held was a nuissance...)

    Lukas

  22. :ph34r: The blacklist contains garbage. It contains mailserver from two of the biggest isp's in Switzerland and gives huge problem in sending mail. We are very angry about that and it is even worse than a virus.

    Hello mediata,

    complain to the ISP. If they stop the spammer they'll drop off the lists...

    (was it freesurf? - This week I reported several spams to them. The worst swiss spammer in Wilen OW spammed through their server. - And I'm glad they are getting enough reports to qualify for the blocklist...)

    Lukas

×
×
  • Create New...