ricci Posted November 24, 2006 Share Posted November 24, 2006 Happy Thanksgiving! I am the server administrator for a small hosting company and rec ently our server, 217.26.90.5, has been listed on SpamCop's blacklist serveral times over the last couple weeks. I have taken several steps to secure the mail server, Running Mail Enable software, b ut I am still seeing spam sent out and we are still getting listed. We use Qmail with spamcontrol patch. Our relays are closed, we have reverse DNS lookups, and authenticated senders must be sending from a valid domain. The amount of junk mail coming from the server has been greatly reduced but I am still having problems being listed... Any other advice, suggestions is greatly appreciated. I fully support what SpamCop is doing and I hate that I may inadvertently be contributing to spam!!!! Thanks in advance! Quote Link to comment Share on other sites More sharing options...
Derek T Posted November 24, 2006 Share Posted November 24, 2006 (edited) Any other advice, suggestions is greatly appreciated. I fully support what SpamCop is doing and I hate that I may inadvertently be contributing to spam!!!! Thanks in advance! Yes, your server is generating 'post-facto' failure notices to spoofed 'From:' envelopes. Stop it! If you must reject do it with a 5xx at the time of the SMTP transaction. There is a FAQ here about 'backscatter'. http://www.spamcop.net/fom-serve/cache/329.html#bounces Submitted: Wed, 22 Nov 2006 19:19:06 GMT: failure notice * 2030397203 ( 217.26.90.5 ) To: massimiliano.taiuti[at]atlc.it * 2030397174 ( 217.26.90.5 ) To: alessandro.naldi[at]atlc.it Submitted: Wed, 22 Nov 2006 19:19:06 GMT: failure notice * 2030397313 ( 217.26.90.5 ) To: massimiliano.taiuti[at]atlc.it * 2030397287 ( 217.26.90.5 ) To: alessandro.naldi[at]atlc.it Submitted: Wed, 22 Nov 2006 19:19:06 GMT: failure notice * 2030397386 ( 217.26.90.5 ) To: massimiliano.taiuti[at]atlc.it * 2030397363 ( 217.26.90.5 ) To: alessandro.naldi[at]atlc.it Older Reports Edited November 24, 2006 by Derek T Quote Link to comment Share on other sites More sharing options...
Derek T Posted December 6, 2006 Share Posted December 6, 2006 Yes, your server is generating 'post-facto' failure notices to spoofed 'From:' envelopes. Stop it! If you must reject do it with a 5xx at the time of the SMTP transaction. There is a FAQ here about 'backscatter'. http://www.spamcop.net/fom-serve/cache/329.html#bounces Well, it would have been nice to have been thanked or brought up-to-date but I see the last report is dated Nov 22nd so it seems the LART was acted upon. Quote Link to comment Share on other sites More sharing options...
Farelf Posted December 7, 2006 Share Posted December 7, 2006 ... I see the last report is dated Nov 22nd so it seems the LART was acted upon. Well, I thank you Derek - good answer, responsive admin, perfect result. Marking "resolved". Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.