Date:  Mon, 15 Jan 2007 16:31:55 -0500
From:  "Darrell D. Mobley" <dmobley (at mark) uhostme.net>
Subject:  [coba-e:08576] Re: Stemming returned undeliverables from spoofed spam
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <001a01c738ec$958c36a0$6400a8c0@YOUR4105E587B6>
In-Reply-To:  <200701151937.l0FJbQFV015388 (at mark) srv1.nickelnetworks.com>
References:  <F07DD4D0940AFF41A207BE85479D2AFF1C06DE (at mark) server.mainline.local> <200701151937.l0FJbQFV015388 (at mark) srv1.nickelnetworks.com>
X-Mail-Count: 08576

If a spammer used one of the server's email addresses to spam the world, the
bounces could be coming from anywhere.  I doubt there is one IP address or
even a range to block.

> -----Original Message-----
> From: Paul Aviles [mailto:paul.aviles (at mark) nickelnetworks.com]
> Sent: Monday, January 15, 2007 2:36 PM
> To: coba-e (at mark) bluequartz.org
> Subject: [coba-e:08572] Re: Stemming returned undeliverables from spoofed
> spam
> 
> Block the IP address from connecting to your box. If is a spammer and you
> are getting that many connections there must be something in common,
> either
> a range of IP's, domains or something to block.
> 
> Regards,
> 
> Paul Aviles
> Nickel Networks
> 
> -----Original Message-----
> From: Colin Jack [mailto:colin (at mark) mainline.co.uk]
> Sent: Monday, January 15, 2007 12:52 PM
> To: coba-e (at mark) bluequartz.org
> Subject: [coba-e:08568] Stemming returned undeliverables from spoofed spam
> 
> I'm looking for some ideas from the more experienced guys out there.
> 
> We have a number of clients who are being flooded with 'undeliverable'
> messages where a spammer has used their email address in the header for
> the
> From: field and they are getting all the bounces. Has anybody any idea how
> I
> might help stem the flow - one guy is getting 500 an hour and this has
> been
> going on for a week! Needless to say it is not helping my server load
> either!
> 
> Using BQ 4.6 ... patched up to date.
> 
> Thankks in anticipation.
> 
> Colin
>