Jump to content

Header parsing problem


kgb

Recommended Posts

I have received a report back in regards to few hundred spam messages that made it into my held mail folder. I have examined the reports and noticed that all spam complaints have gone up to my ISP.

I have 2 or 3 e-mail addresses that I have forwarded to my spamcop e-mail address and it appears that spamcop takes my ISP which is responsible for forwarding the message to my spamcop account as originating ISP for the spam causing me a lot of headaches. Here's an example of a problem with spamcop logic

Email originates from point A (spammer)

--> e-mail gets delivered to it's final destination (my mail box)

--> Mail server forwards the e-mail to spamcop account ( point B )

Instead of reporting point A as a spammer it reports point B. Now I understand that certain spammers forge message headers and this is the only sure way of having to eliminate that problem but that sort of prevents me from sending any spam complaints and I do get hundreds of them a day.

What should I do in my case? Should I just stop reporting spam in fear of having to report my self as a spammer? Any suggestions would be apreciated.

Denis

Link to comment
Share on other sites

An example would have been the Tracking URL of one of these alleged mis-parsed items. Failing that data, one can only pull guesses out of the air. On the other hand, this self-reporting is exactly what the Mail-Host configuration thing was supposed to help prevent. Where are you in the process of your mail-host configuration? (not that this will cure any issue of a mis-configured server that's not doing the right thing ..)

Link to comment
Share on other sites

Here's an example of few out of 300 messages that all went to my ISP when I reported them.

http://www.spamcop.net/sc?id=z573209670zea...12c5ecd3933ffcz

http://www.spamcop.net/sc?id=z573209660z83...2511ae5efa540cz

http://www.spamcop.net/sc?id=z573209653z21...aa32d25403bc9dz

http://www.spamcop.net/sc?id=z573209642zf8...de54c705da20c3z

http://www.spamcop.net/sc?id=z573209630zcc...4e187809e8861bz

In terms of mail-host configuration. I am not sure what you're asking. THe mx records the e-mail server setup all appears to be okay. It does what it's suppose to do. It receives a message for me and then forwards the message to my spamcop account that I use as a filter. Unfortunately the forward action that it's doing right now gets interpreted by spamcop as origin of the spam when the only thing that our mail server does is forward the e-mail to my spamcop account.

Link to comment
Share on other sites

You need to give a holler at whoever is responsible for the server that calls itself WEB1 ..... perhaps gently suggest that they get off their duff and fix the configuration and registration of that server.

Link to comment
Share on other sites

Here's an example of few out of 300 messages that all went to my ISP when I reported them.

http://www.spamcop.net/sc?id=z573209670zea...12c5ecd3933ffcz

http://www.spamcop.net/sc?id=z573209660z83...2511ae5efa540cz

http://www.spamcop.net/sc?id=z573209653z21...aa32d25403bc9dz

http://www.spamcop.net/sc?id=z573209642zf8...de54c705da20c3z

http://www.spamcop.net/sc?id=z573209630zcc...4e187809e8861bz

In terms of mail-host configuration. I am not sure what you're asking. THe mx records the e-mail server setup all appears to be okay. It does what it's suppose to do. It receives a message for me and then forwards the message to my spamcop account that I use as a filter. Unfortunately the forward action that it's doing right now gets interpreted by spamcop as origin of the spam when the only thing that our mail server does is forward the e-mail to my spamcop account.

14156[/snapback]

You have added the spamcop mail/cesmail mailhost but not the one for the account forwarding to spamciop mail. You need to add that forwarding email address/mailserver by logging into the reporting website and clicking mailhosts and then add a mailhost. Do *not* report any further spam until you have successfully added the mailhost, received the probe and returned it and gotten the success message. I have delisted your ISPs mailserver.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...