Spammers
Author
Discussion

.Flyer

Original Poster:

434 posts

280 months

Friday 9th September 2005
quotequote all
[quote=tvrgit]...or using your server as a mail relay?

:yikes:[/quote]
No, I don't *think* that's happening. Here's part of the header from one:

[quote=]Microsoft Mail Internet Headers Version 2.0
Received: from mail pickup service by xxx.co.uk with Microsoft SMTPSVC;
Fri, 9 Sep 2005 10:31:09 +0100
thread-index: AcW1ITWkUMj7s98gRWm/YS0gfpGwDQ==
Return-Path: <MAILER-DAEMON@lml501.securepod.com>
Cc:
Keywords: mspop3connector."Bud_Simmons@assessors.net" <Bud_Simmons@assessors.net>mspop3connector.
Message-ID: <000001c5b521$35a437b0$c801a8c0@MetaSolutions.local>
Date: Fri, 9 Sep 2005 10:31:08 +0100
Content-Transfer-Encoding: 7bit
From: "Internet Mail Delivery" <postmaster@l-daemon>
Subject: Delivery Notification: Delivery has failed
To: <Andrew>
X-Mailer: Microsoft CDO for Exchange 2000
MIME-Version: 1.0
Content-Type: multipart/report;
report-type=delivery-status;
boundary="Boundary_(ID_DlAi4xpLOFT1rFvU6Tso0g)"
X-Mailmap-To: bud_simmons@assessors.net
Content-Class: urn:content-classes:message
Importance: normal
Status:
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.326
X-OriginalArrivalTime: 09 Sep 2005 09:31:09.0312 (UTC) FILETIME=[35EBC800:01C5B521]

--Boundary_(ID_DlAi4xpLOFT1rFvU6Tso0g)
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-language: en-US

--Boundary_(ID_DlAi4xpLOFT1rFvU6Tso0g)
Content-Transfer-Encoding: 7bit
Content-Type: message/delivery-status

--Boundary_(ID_DlAi4xpLOFT1rFvU6Tso0g)
Content-Transfer-Encoding: 7bit
Content-Type: message/rfc822

Return-path: <Bud_Simmons@assessors.net>
Received: from shaw_mailrouter-daemon.l-daemon by l-daemon
(Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004))
id <0IMJ00C5ELJNXY00@l-daemon>; Fri, 09 Sep 2005 03:11:47 -0600 (MDT)
Received: from www.moltumyr.com (www.moltumyr.com [209.180.63.65])
by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004))
with SMTP id <0IMJ00BDKLI1SC00@l-daemon>; Fri, 09 Sep 2005 03:11:47 -0600 (MDT)
Date: Fri, 09 Sep 2005 02:11:40 -0800
From: Stella jackson <Bud_Simmons@assessors.net>
Subject: FW: Bravo
To: preminimbah@shaw.ca
Message-id: <MAILSENDERNG6BGTuAy9972933a@chitv>
X-UIDL: H#8!!<"("!VH5"!&*<!!
MIME-version: 1.0
X-Mailer: Umail
Content-type: multipart/related; boundary="Boundary_(ID_2GOPUV8dgnO+6Ob96O9slg)"
X-MsgID: 1817AFC4.479872462367
X-Virus-Scanned: by amavisd-new at saveentry
X-Credit: EFyru4t
X-Hash: 4WUyOMLdUCk9p36KCA8==
X-OriginalArrivalTime: Fri,
09 Sep 2005 02:11:40 -0800 FILETIME=[F0F18D86:53C62075][/quote]

And here's the text:
[quote=]Your message did not reach some or all of the intended recipients.

Subject: FW: Bravo
Sent: 09/09/2005 11:12

The following recipient(s) could not be reached:

preminimbah@shaw.ca on 09/09/2005 10:31
The e-mail account does not exist at the organization this message was sent to. Check the e-mail address, or contact the recipient directly to find out the correct address.
<l-daemon (shaw_mailrouter-daemon) #5.1.1 smtp;550 5.1.1 unknown or illegal alias: preminimbah@shaw.ca>[/quote]

assessors.net is one of my domain names; it is parked at DomainsNet who just do email forwarding. So, I think that the spammers are simply using the domain name as a return address. Bastard fuckers are now also using my main email address.

Any way of stopping this? I'm receiving approx. 100 return emails like this a day :(

deckster

9,631 posts

285 months

Friday 9th September 2005
quotequote all
Have you tried DomainsNet? They may be able to put in some kind of filter to catch these at source.

.Flyer

Original Poster:

434 posts

280 months

Monday 12th September 2005
quotequote all
I haven't, but can't imagine they'd be interested in putting a filter on - it's also possible that some of the returned emails might actually be relevant to me ...

God, I hate spammers

bga

8,134 posts

281 months

Monday 12th September 2005
quotequote all
.Flyer said:
I haven't, but can't imagine they'd be interested in putting a filter on - it's also possible that some of the returned emails might actually be relevant to me ...

God, I hate spammers


I had this with a couple of my domains. Fortunately they gave up after a couple of months.

BliarOut

72,863 posts

269 months

Monday 12th September 2005
quotequote all
Talking of spammers, who are the new kids on the block? There is a fresh bunch who have started to infiltrate Hotmail. Most annoying

>> Edited by BliarOut on Monday 12th September 11:45

fish

4,064 posts

312 months

Monday 12th September 2005
quotequote all
Had the very thing happen to me where spammers used my domain as the return address using random first names eg fred@mydomain.com I was getting something like a few thousand an hour! from all round the world.

I dis collect them as my system was sent to forward unknown receipiants to a secretarys mail box. I had to bounce all the unknown names which atleast took the workload off my server.... Then I didn't really care.