Thanks but I turned off relay over a year ago and have confirmed that it is
not relaying. I've been using MailWasher and when it tries to "bounce" back
a blocklisted email to appear as an unreceivable (and fool sender to take me
off list) I get a message that SMTP will not allow relay.
I think they are doing something else to shove my name in the sender part of
the MIME packet. If there was a way to compare the sending IP address to
thhe real one for the indicated sender (me in this case) and reject if
different there might be a way to filter for this tactic.
Oh, well, the war goes on.
-Todd C.
-----Original Message-----
From: Rich Shafer [mailto:rshafer@...]
Sent: Thursday, July 18, 2002 3:18 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] New spammer tactic
Todd,
I had a similar problem except.....
I was receiving address not known errors and the email you sent had a virus.
Similarly, to your email, the email appeared to be from me.
I didn't send those emails.
When you viewed the message source it clearly showed that the spammer was
using my own email address to relay thru my mail server.
My mail server being a little old just looked at my email address and said
"yea sure go ahead and relay!"
It wouldn't relay email from anyone outside my domain but it sure worked
real well for a spammer who figured out that trick.
Well I ended up turning off internal relaying as well.
I think you need to check the email message source code and make sure your
email account isn't being used to relay email through your own email server.
Rich
not relaying. I've been using MailWasher and when it tries to "bounce" back
a blocklisted email to appear as an unreceivable (and fool sender to take me
off list) I get a message that SMTP will not allow relay.
I think they are doing something else to shove my name in the sender part of
the MIME packet. If there was a way to compare the sending IP address to
thhe real one for the indicated sender (me in this case) and reject if
different there might be a way to filter for this tactic.
Oh, well, the war goes on.
-Todd C.
-----Original Message-----
From: Rich Shafer [mailto:rshafer@...]
Sent: Thursday, July 18, 2002 3:18 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] New spammer tactic
Todd,
I had a similar problem except.....
I was receiving address not known errors and the email you sent had a virus.
Similarly, to your email, the email appeared to be from me.
I didn't send those emails.
When you viewed the message source it clearly showed that the spammer was
using my own email address to relay thru my mail server.
My mail server being a little old just looked at my email address and said
"yea sure go ahead and relay!"
It wouldn't relay email from anyone outside my domain but it sure worked
real well for a spammer who figured out that trick.
Well I ended up turning off internal relaying as well.
I think you need to check the email message source code and make sure your
email account isn't being used to relay email through your own email server.
Rich
----- Original Message -----
From: Todd Caughey
To: 'vantage@yahoogroups.com'
Sent: Thursday, July 18, 2002 3:55 PM
Subject: [Vantage] [OT] New spammer tactic
I have received several Spam emails which set a new low for spammers.
They
have a way to substitute my email address as the sender thereby preventing
me from using a block list. Then they have the gall to place the
following
statement at the bottom of the message:
----------
This email was sent to you using Saf-E Mail Systems. Your email address
was
automatically inserted into the To and From addresses to eliminate
undeliverables which waste bandwidth and cause internet congestion. Your
email or webserver IS NOT being used for the sending of this mail. No-one
else is receiving emails from your address. You may utilize the removal
link
below if you do not wish to receive this mailing.
Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CR
011-506-267-7139
------------
Eliminate undeliverables indeed! Anyone ever heard of SAF-E Mail? Know
of
any way to filter on the real sender? Or an Exchange setting that would
prevent this? Them being in Costa Rica doesn't help - even future
anti-Spam
laws would not touch them there. Oh, and the embedded HTML content
contained a script (which I did not allow to run). Hard telling what they
were up to.
Thanks,
-Todd Caughey
Harvey Vogel Mfg. Co.
[Non-text portions of this message have been removed]
Yahoo! Groups Sponsor
ADVERTISEMENT
Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
[Non-text portions of this message have been removed]
Yahoo! Groups Sponsor
ADVERTISEMENT
<http://rd.yahoo.com/M=228862.2128520.3581629.1829184/D=egroupweb/S=17050071
83:HM/A=1155069/R=0/*http://adfarm.mediaplex.com/ad/ck/990-1736-1039-302>
Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .
[Non-text portions of this message have been removed]