ricci Posted November 24, 2006 Posted November 24, 2006 Happy Thanksgiving! I am the server administrator for a small hosting company and rec ently our server, 217.26.90.5, has been listed on SpamCop's blacklist serveral times over the last couple weeks. I have taken several steps to secure the mail server, Running Mail Enable software, b ut I am still seeing spam sent out and we are still getting listed. We use Qmail with spamcontrol patch. Our relays are closed, we have reverse DNS lookups, and authenticated senders must be sending from a valid domain. The amount of junk mail coming from the server has been greatly reduced but I am still having problems being listed... Any other advice, suggestions is greatly appreciated. I fully support what SpamCop is doing and I hate that I may inadvertently be contributing to spam!!!! Thanks in advance!
Derek T Posted November 24, 2006 Posted November 24, 2006 Any other advice, suggestions is greatly appreciated. I fully support what SpamCop is doing and I hate that I may inadvertently be contributing to spam!!!! Thanks in advance! Yes, your server is generating 'post-facto' failure notices to spoofed 'From:' envelopes. Stop it! If you must reject do it with a 5xx at the time of the SMTP transaction. There is a FAQ here about 'backscatter'. http://www.spamcop.net/fom-serve/cache/329.html#bounces Submitted: Wed, 22 Nov 2006 19:19:06 GMT: failure notice * 2030397203 ( 217.26.90.5 ) To: massimiliano.taiuti[at]atlc.it * 2030397174 ( 217.26.90.5 ) To: alessandro.naldi[at]atlc.it Submitted: Wed, 22 Nov 2006 19:19:06 GMT: failure notice * 2030397313 ( 217.26.90.5 ) To: massimiliano.taiuti[at]atlc.it * 2030397287 ( 217.26.90.5 ) To: alessandro.naldi[at]atlc.it Submitted: Wed, 22 Nov 2006 19:19:06 GMT: failure notice * 2030397386 ( 217.26.90.5 ) To: massimiliano.taiuti[at]atlc.it * 2030397363 ( 217.26.90.5 ) To: alessandro.naldi[at]atlc.it Older Reports
Derek T Posted December 6, 2006 Posted December 6, 2006 Yes, your server is generating 'post-facto' failure notices to spoofed 'From:' envelopes. Stop it! If you must reject do it with a 5xx at the time of the SMTP transaction. There is a FAQ here about 'backscatter'. http://www.spamcop.net/fom-serve/cache/329.html#bounces Well, it would have been nice to have been thanked or brought up-to-date but I see the last report is dated Nov 22nd so it seems the LART was acted upon.
Farelf Posted December 7, 2006 Posted December 7, 2006 ... I see the last report is dated Nov 22nd so it seems the LART was acted upon. Well, I thank you Derek - good answer, responsive admin, perfect result. Marking "resolved".
Recommended Posts
Archived
This topic is now archived and is closed to further replies.