Re: Blacklisted on Verizon

2009-11-11 Thread Chris Arnold
On 11/11/09 7:55 AM, "/dev/rob0" wrote: > "Senders by message count" is ENVELOPE SENDER, in the case of spam, > completely useless. If the OP has, as I might guess, a compromised > httpd + PHP script, for example, the envelope sender will probably > change for EACH spam it sends. /bin/ps ax -eost

Re: Blacklisted on Verizon

2009-11-11 Thread Chris Arnold
On 11/11/09 7:55 AM, "/dev/rob0" wrote: > On Wednesday 11 November 2009 06:14:08 >dhottin...@harrisonburg.k12.va.us wrote: >> Quoting Stan Hoeppner : >>> You should be concentrating your focus on the "Senders by >>> message count" section. >> >> Wouldnt the logwatch from the server list top

Re: Blacklisted on Verizon

2009-11-10 Thread Chris Arnold
On 11/10/09 8:58 PM, "/dev/rob0" wrote: > On Tuesday 10 November 2009 19:21:04 Chris Arnold wrote: >> OK, nothing stands out from pflogsumm.pl: > > Nothing? > >> Per-Day Traffic Summary >> date received deli

Re: Blacklisted on Verizon

2009-11-10 Thread Chris Arnold
On 11/10/09 8:36 PM, "Stan Hoeppner" wrote: > Chris Arnold put forth on 11/10/2009 7:21 PM: > >> Don't want to post the whole pflogsumm file as 1 it is very long and 2 there >> are somethings that don't need to be shared on a mailinglist :) >> Wha

Re: Blacklisted on Verizon

2009-11-10 Thread Chris Arnold
1 it is very long and 2 there are somethings that don't need to be shared on a mailinglist :) What are some things I should be looking for in the pflogsumm.pl report? On 11/10/09 8:00 PM, "d.h...@yournetplus.com" wrote: > Quoting Chris Arnold : > >> OK, I have gott

Re: Blacklisted on Verizon

2009-11-10 Thread Chris Arnold
I am running pflogsumm.pl inside of that dir. Does it need to be moved to the mail log dir? It doesn¹t seem so as the readme says to copy to path/to/bin folder. On 11/10/09 6:33 PM, "Justin C. Le Grice" wrote: > Chris Arnold wrote: >> Blacklisted on Verizon Hello list! We ar

Blacklisted on Verizon

2009-11-10 Thread Chris Arnold
Hello list! We are being blacklisted every few days from verizon. This is less important right now as I need to find out if/who is sending spam from the email server or if the server is an open relay. I am less inclined to think postfix (which is what we use) is an open relay. More inclined to thin