Loading ...
Sorry, an error occurred while loading the content.

Re: BackScatter Problem

Expand Messages
  • kj
    ... This is just ordinary spam, not backscatter. If it was backscatter, there would be trace of a server having bounced it. The above was sent from an IP that
    Message 1 of 11 , Jun 1, 2009
    • 0 Attachment
      jan gestre wrote:
      > Received: from 55.Red-88-7-191.staticIP.rima-tde.net
      > (55.Red-88-7-191.staticIP.rima-tde.net [88.7.191.55])
      > by mail.example.com (Postfix) with ESMTP id 9DEC4148041
      > for <jmgarcia@...>; Mon, 1 Jun 2009 08:58:53 +0800 (PHT)
      > Message-ID: <365683314256959.DTWIBJSCPDREBDG@...-88-7-191.staticIP.rima-tde.net>
      > From: "Jeanine" <jmgarcia@...>
      > To: jmgarcia@...
      > Subject: Check it now
      > MIME-Version: 1.0
      > Content-Type: text/html; charset="ISO-8859-1"
      > Content-Transfer-Encoding: 7bit
      > Date: Mon, 1 Jun 2009 08:58:53 +0800 (PHT)
      >
      > The received from ip address is obviously not the company's real ip
      > address, and we have lots of emails like this.

      This is just ordinary spam, not backscatter. If it was backscatter,
      there would be trace of a server having bounced it.

      The above was sent from an IP that doesn't accept mail, and judging by
      that PTR, it's not a real mail server anyway. If you were using
      Spamhaus, it would have been rejected too - it's in PBL and XBL.

      --kj
    • jan gestre
      On Tue, Jun 2, 2009 at 7:31 AM, kj ... Hi KJ, That s the funny thing, I m using sbl-xbl spamhaus as well as spamcop.net but it wasn t blocked, I ve now changed
      Message 2 of 11 , Jun 1, 2009
      • 0 Attachment
        On Tue, Jun 2, 2009 at 7:31 AM, kj
        <koffiejunkielistlurker@...> wrote:
        > jan gestre wrote:
        >>
        >> Received: from 55.Red-88-7-191.staticIP.rima-tde.net
        >> (55.Red-88-7-191.staticIP.rima-tde.net [88.7.191.55])
        >>     by mail.example.com (Postfix) with ESMTP id 9DEC4148041
        >>     for <jmgarcia@...>; Mon, 1 Jun 2009 08:58:53 +0800 (PHT)
        >> Message-ID:
        >> <365683314256959.DTWIBJSCPDREBDG@...-88-7-191.staticIP.rima-tde.net>
        >> From: "Jeanine" <jmgarcia@...>
        >> To: jmgarcia@...
        >> Subject: Check it now
        >> MIME-Version: 1.0
        >> Content-Type: text/html; charset="ISO-8859-1"
        >> Content-Transfer-Encoding: 7bit
        >> Date: Mon, 1 Jun 2009 08:58:53 +0800 (PHT)
        >>
        >> The received from ip address is obviously not the company's real ip
        >> address, and we have lots of emails like this.
        >
        > This is just ordinary spam, not backscatter.  If it was backscatter, there
        > would be trace of a server having bounced it.
        >
        > The above was sent from an IP that doesn't accept mail, and judging by that
        > PTR, it's not a real mail server anyway.  If you were using Spamhaus, it
        > would have been rejected too - it's in PBL and XBL.
        >
        > --kj
        >

        Hi KJ,

        That's the funny thing, I'm using sbl-xbl spamhaus as well as
        spamcop.net but it wasn't blocked, I've now changed it to zen, I'm not
        sure though if it would have any effect.

        Regards,

        Jan
      • Sahil Tandon
        ... The IP is not listed on SBL and was only listed on CBL (ergo XBL) at 2009-06-01 14:00 GMT; you received it before then. If you had been using PBL (or
        Message 3 of 11 , Jun 1, 2009
        • 0 Attachment
          On Tue, 02 Jun 2009, jan gestre wrote:

          > That's the funny thing, I'm using sbl-xbl spamhaus as well as
          > spamcop.net but it wasn't blocked, I've now changed it to zen, I'm not
          > sure though if it would have any effect.

          The IP is not listed on SBL and was only listed on CBL (ergo XBL) at
          2009-06-01 14:00 GMT; you received it before then. If you had been using
          PBL (or better, Zen), then it might've been blocked.

          --
          Sahil Tandon <sahil@...>
        Your message has been successfully submitted and would be delivered to recipients shortly.