Re: Trace spam activity on mail server

2017-05-03 Thread lists
s Subject: Re: Trace spam activity on mail server On 2 May 2017, at 10:56, li...@lazygranch.com wrote: > Would a spammy email server only trigger one RBL? Sure. > While mxtoolbox looks complete, there are more RBLs than on their > list. I never knew Trend Micro had a RBL. ‎ Funny stor

Re: Trace spam activity on mail server

2017-05-03 Thread Michael Segel
Now thats a name from the past. Bill, you’d probably know some of the spammer domains where they complained about spamhaus and other RBLs… Its been a while since I followed all of this stuff from Usenet days… > On May 3, 2017, at 10:25 AM, Bill Cole > wrote: > > On 2 May 2017, at 10:56, l

Re: Trace spam activity on mail server

2017-05-03 Thread Bill Cole
On 2 May 2017, at 10:56, li...@lazygranch.com wrote: Would a spammy email server only trigger one RBL? Sure. While mxtoolbox looks complete, there are more RBLs than on their list. I never knew Trend Micro had a RBL. ‎ Funny story: technically Trend Micro has the ONLY "RBL" because that's

Re: Trace spam activity on mail server

2017-05-02 Thread lists
spam filters."   Original Message   From: Michael Segel Sent: Tuesday, May 2, 2017 1:36 PM To: li...@lazygranch.com Cc: Kevin A. McGrail; Matteo Cazzador; postfix users Subject: Re: Trace spam activity on mail server I got what you were saying. What you’re talking about is known as a Joe Job

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
hack, I provide log data. That is how it should be done. > > Two easy things to harden your server: > 1) no web mail > 2) all accounts use TLS > > > > Original Message > From: Michael Segel > Sent: Tuesday, May 2, 2017 9:02 AM > To: Kevin A. McGrail >

Re: Trace spam activity on mail server

2017-05-02 Thread lists
users Subject: Re: Trace spam activity on mail server First, honey pots aren’t an issue and spoofing an IP address is fairly easy to pickup. As to spam is in the eye of the beholder, if you go back to my questions… You’ll see that I asked about the OP’s mail list. Free clue… if you purchased a li

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
First, honey pots aren’t an issue and spoofing an IP address is fairly easy to pickup. As to spam is in the eye of the beholder, if you go back to my questions… You’ll see that I asked about the OP’s mail list. Free clue… if you purchased a list of potential customers… you’re a spammer. If

Re: Trace spam activity on mail server

2017-05-02 Thread Matteo Cazzador
Segel Verzonden: dinsdag 2 mei 2017 16:02 Aan: Kevin A. McGrail CC: li...@lazygranch.com; Matteo Cazzador; postfix users Onderwerp: Re: Trace spam activity on mail server Just to follow up… I ran the check on his domain: https://mxtoolbox.com/domain/netlite.it/ Pretty clean, maybe a few things t

Re: Trace spam activity on mail server

2017-05-02 Thread Matteo Cazzador
, Louis -Oorspronkelijk bericht- Van: dovecot_...@hotmail.com [mailto:owner-postfix-us...@postfix.org] Namens Michael Segel Verzonden: dinsdag 2 mei 2017 16:02 Aan: Kevin A. McGrail CC: li...@lazygranch.com; Matteo Cazzador; postfix users Onderwerp: Re: Trace spam activity on mail server

RE: Trace spam activity on mail server

2017-05-02 Thread L . P . H . van Belle
Maybe its handy to tell us the real domainname and ip involving this problem?    

Re: Trace spam activity on mail server

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 10:56 AM, li...@lazygranch.com wrote: Would a spammy email server only trigger one RBL? Sure. Spam is often in the eye of the beholder, people use different feeds, different policies, purposes, etc. I wouldn't discount it that it's an issue just because it's only on one RBL. I

Re: Trace spam activity on mail server

2017-05-02 Thread lists
esday, May 2, 2017 7:02 AM To: Kevin A. McGrail Cc: li...@lazygranch.com; Matteo Cazzador; postfix users Subject: Re: Trace spam activity on mail server Just to follow up… I ran the check on his domain: https://mxtoolbox.com/domain/netlite.it/ Pretty clean, maybe a few things to fix, but he’s n

RE: Trace spam activity on mail server

2017-05-02 Thread L . P . H . van Belle
s Michael Segel > Verzonden: dinsdag 2 mei 2017 16:02 > Aan: Kevin A. McGrail > CC: li...@lazygranch.com; Matteo Cazzador; postfix users > Onderwerp: Re: Trace spam activity on mail server > > Just to follow up… > I ran the check on his domain: > https://mxtoolbox.com/dom

Re: Trace spam activity on mail server

2017-05-02 Thread Matteo Cazzador
Hi, everybody, yes is the first thing i try, i use mxtoolbox always before every investigation (from 1 year). For me the problem is related only at spam activity that my server don't trace or a somthing compromise, like an user account. But on my server there are no trace of spam. Or it is

Re: Trace spam activity on mail server

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 10:02 AM, Michael Segel wrote: Just to follow up… I ran the check on his domain: https://mxtoolbox.com/domain/netlite.it/ Pretty clean, maybe a few things to fix, but he’s not on any black list. I don’t know when he set up his domain, it could be that Trend Micro blocked the IP blo

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
Just to follow up… I ran the check on his domain: https://mxtoolbox.com/domain/netlite.it/ Pretty clean, maybe a few things to fix, but he’s not on any black list. I don’t know when he set up his domain, it could be that Trend Micro blocked the IP block due to a previous tenant and never took

Re: Trace spam activity on mail server

2017-05-02 Thread Kevin A. McGrail
On 5/2/2017 9:51 AM, Michael Segel wrote: You can run a check on your MX Server… there are a couple of web sites that do this… and I think one or two will identify the RBLs that include you. One trick I use a lot when I have an infected machine on a network or a customer with a problem is that

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
Ok, This is a little bit off topic for the mail list. Assuming as you say, you don’t spam… You may be included in a RBL if you reside on a net block that has a spammer on it. So while your domain isn’t spamming, if your next door virtual neighbor is… you’re SOL (Shit Out of Luck) until you

Re: Trace spam activity on mail server

2017-05-01 Thread lists
I did a whois on your domain, checked the Trend Micro list, and it was not found.  Replies to this email will be no different than your previous email. Basically all you can do is request the block be removed. These RBLs have little sympathy for those they block.  My best solution for non-repo