Re: SPAM that never made it.......
 

On Thu, 30 Oct 2003 10:58:36 +1300, steve <steve@unowut.org> wrote:

>My sendmail-based mail server has been doing a great job of preventing known
>spammers from even connecting to me.
>
>With Xmas approaching, the rate of spam seems to have majorly escalated in
>the past 2 weeks.
>
>Here are just some of the SPAM attempts that were blocked yesterday....while
>5 actual spams did get through. They won't make it today if they try
>again.

><dhdudghksdldy@hotmail.com>... REJECTED - Due to excessive SPAM from
>Hotmail,we no longer accept mail from this doman.Please send mail from a
>responsible ISP

>h9SKsBf02939: ruleset=check_mail, arg1=<35cr76@msn.com>,
>relay=node-d-17cd.a2000.nl [62.195.23.205], reject=550 5.0.0
><35cr76@msn.com>... REJECT - Too much SPAM from MSN.COM

>h9T0nAf03280: ruleset=check_mail, arg1=<marshadouglas_uo@yahoo.co.uk>,
>relay=adsl-67-66-79-41.dsl.elpstx.swbell.net [67.66.79.41], reject=550
>5.0.0 <marshadouglas_uo@yahoo.co.uk>... REJECTED - Too much SPAM from Yahoo

Are you rejecting emails because they actually come from
msn/hotmail/yahoomail servers or because they have
@hotmail/yahoomail/msn "from" addresses but don't actually originate
from the relevent networks?


--
you can contact me via http://aardvark.co.nz/contact/

SPAM that never made it.......
 

My sendmail-based mail server has been doing a great job of preventing known
spammers from even connecting to me.

With Xmas approaching, the rate of spam seems to have majorly escalated in
the past 2 weeks.

Here are just some of the SPAM attempts that were blocked yesterday....while
5 actual spams did get through. They won't make it today if they try
again.

************************************************** ***********

MAILLOG

**Unmatched Entries**

NOQUEUE: 216-201-91-37.cpe-dsl.octapus.com [216.201.91.37] did not issue
MAIL/EXPN/VRFY/ETRN during connection to MTA

h9SHNmf02681: ruleset=check_mail, arg1=<jkd1017@empal.com>,
relay=bm-2a.paradise.net.nz [202.0.58.21], reject=550 5.7.1
<jkd1017@empal.com>... Access denied

h9SIrBf02774: ruleset=check_relay, arg1=[211.220.64.52], arg2=211.220.64.52,
relay=[211.220.64.52], reject=550 5.7.1 Access denied

NOQUEUE: [211.220.64.52] did not issue MAIL/EXPN/VRFY/ETRN during connection
to MTA

h9SKgLf02916: ruleset=check_relay, arg1=msr27.hinet.net, arg2=168.95.4.127,
relay=msr27.hinet.net [168.95.4.127], reject=550 5.7.1 Access denied

NOQUEUE: msr27.hinet.net [168.95.4.127] did not issue MAIL/EXPN/VRFY/ETRN
during connection to MTA

NOQUEUE: customer-CLN-54-12.megared.net.mx [200.77.54.12] (may be forged)
did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

h9SKlOf02928: ruleset=check_mail, arg1=<91m2h@mail.com>,
relay=user-0ce2fp6.cable.mindspring.com [24.225.63.38], reject=550 5.7.1
<91m2h@mail.com>... Access denied

h9SKrtf02936: ruleset=check_mail, arg1=<dhdudghksdldy@hotmail.com>,
relay=bm-1a.paradise.net.nz [202.0.58.20], reject=550 5.0.0
<dhdudghksdldy@hotmail.com>... REJECTED - Due to excessive SPAM from
Hotmail,we no longer accept mail from this doman.Please send mail from a
responsible ISP

h9SKsBf02939: ruleset=check_mail, arg1=<35cr76@msn.com>,
relay=node-d-17cd.a2000.nl [62.195.23.205], reject=550 5.0.0
<35cr76@msn.com>... REJECT - Too much SPAM from MSN.COM

h9SMf9f03104: ruleset=check_relay, arg1=[211.48.23.192], arg2=211.48.23.192,
relay=[211.48.23.192], reject=550 5.7.1 Access denied

NOQUEUE: [211.48.23.192] did not issue MAIL/EXPN/VRFY/ETRN during connection
to MTA

h9SNxhf03223: ruleset=check_relay, arg1=[218.79.219.100],
arg2=218.79.219.100, relay=[218.79.219.100], reject=550 5.7.1 Access denied
NOQUEUE: [218.79.219.100] did not issue MAIL/EXPN/VRFY/ETRN during
connection to MTA

h9T0mwf03275: ruleset=check_relay, arg1=[211.244.171.224],
arg2=211.244.171.224, relay=znyf@[211.244.171.224], reject=550 5.7.1 Access
denied

NOQUEUE: znyf@[211.244.171.224] did not issue MAIL/EXPN/VRFY/ETRN during
connection to MTA

h9T0n2f03277: ruleset=check_mail, arg1=<elawsonpx@email.com>,
relay=[63.230.8.25], reject=550 5.7.1 <elawsonpx@email.com>... Access
denied

h9T0nAf03280: ruleset=check_mail, arg1=<marshadouglas_uo@yahoo.co.uk>,
relay=adsl-67-66-79-41.dsl.elpstx.swbell.net [67.66.79.41], reject=550
5.0.0 <marshadouglas_uo@yahoo.co.uk>... REJECTED - Too much SPAM from Yahoo

h9T0nDf03282: ruleset=check_mail, arg1=<adowneypz@mail.com>,
relay=d57-19-246.home.cgocable.net [24.57.19.246], reject=550 5.7.1
<adowneypz@mail.com>... Access denied

h9T0nGf03283: ruleset=check_relay, arg1=[218.9.22.82], arg2=218.9.22.82,
relay=[218.9.22.82], reject=550 5.7.1 Access denied

NOQUEUE: [218.9.22.82] did not issue MAIL/EXPN/VRFY/ETRN during connection
to MTA

h9T0nNf03285: ruleset=check_mail, arg1=<napoleonpark_mt@yahoo.com>,
relay=qcba@adsl-68-121-178-49.dsl.lsan03.pacbell.net [68.121.178.49],
reject=550 5.0.0 <napoleonpark_mt@yahoo.com>... REJECTED - Too much SPAM
from Yahoo

h9T0nUf03287: ruleset=check_mail, arg1=<hugh_blackburn_as@mail.com>,
relay=c213-100-136-141.swipnet.se [213.100.136.141], reject=550 5.7.1
<hugh_blackburn_as@mail.com>... Access denied

h9T0nWf03289: ruleset=check_mail, arg1=<andreawhitfield_cs@yahoo.co.uk>,
relay=c68.118.127.2.ts46v-01.rckprt.tx.charter.com [68.118.127.2],
reject=550 5.0.0 <andreawhitfield_cs@yahoo.co.uk>... REJECTED - Too much
SPAM from Yahoo

h9T0nZf03291: ruleset=check_mail, arg1=<jeodonnelldb@yahoo.co.uk>,
relay=ed-dhcp128.ed.arizona.edu [128.196.101.128], reject=550 5.0.0
<jeodonnelldb@yahoo.co.uk>... REJECTED - Too much SPAM from Yahoo

h9T0nif03293: ruleset=check_mail, arg1=<j.holderlw@yahoo.com>,
relay=pD9E969AC.dip.t-dialin.net [217.233.105.172], reject=550 5.0.0
<j.holderlw@yahoo.com>... REJECTED - Too much SPAM from Yahoo

h9T1Exf03321: ruleset=check_relay, arg1=[211.90.158.94],

......etc.....

--
defenestrate: The act of throwing Windows out the window and replacing it on
your PC with some other operating system.

Re: SPAM that never made it.......
 

steve wrote:
> Here are just some of the SPAM attempts that were blocked yesterday....while
> 5 actual spams did get through. They won't make it today if they try
> again.
> ************************************************** ***********

wow, ummm thanks.

Re: SPAM that never made it.......
 

T.N.O. allegedly said:

> steve wrote:
>> Here are just some of the SPAM attempts that were blocked
>> yesterday....while
>> 5 actual spams did get through. They won't make it today if they try
>> again.
>> ************************************************** ***********
>
> wow, ummm thanks.

:-)

You're welcome.

--
defenestrate: The act of throwing Windows out the window and replacing it on
your PC with some other operating system.

Re: SPAM that never made it.......
 

Bruce Simpson allegedly said:

> Are you rejecting emails because they actually come from
> msn/hotmail/yahoomail servers or because they have
> @hotmail/yahoomail/msn "from" addresses but don't actually originate
> from the relevent networks?

The latter.

Most of this mail is from zombie clients run by idiots who don't even know
they have been hacked. I prefer not to block thier IPs as the domain names
used are more of less constant: hotmail / yahoo / aol / excite / bigfoot.

I counted for several weeks. I received hundreds of spam from the sourcs
above...and the ONLY legit Hotmail and yahoo mail was from my siblings.
They now send e-mail to a different address, set up only for their use and
not seen anywhere else by anyone. I never get spam there.

So blocking these gains me a lot and costs me nothing. I read my logs
daily. If there is anything there that looks like someone I want to hear
from, I will send them a note asking them if they tried to contact me and
telling them how they can.

That happens *very* rarely. Easily 99.99% (literally 9999 out of 10,000) of
this stuff is pure spam. I've caught perhaps 5 genuine e-mails being
bounced in 18 months.....out of 50-100 / *day*.

--
defenestrate: The act of throwing Windows out the window and replacing it on
your PC with some other operating system.

Re: SPAM that never made it.......
 

steve wrote:

> T.N.O. allegedly said:
>
>
>>steve wrote:
>>
>>>Here are just some of the SPAM attempts that were blocked
>>>yesterday....while
>>>5 actual spams did get through. They won't make it today if they try
>>>again.
>>>*********************************************** **************
>>
>>wow, ummm thanks.
>
>
> :-)
>
> You're welcome.
>

Actually I was wondering why you posted all of that... it was kinda from
left field.

Re: SPAM that never made it.......
 

T.N.O. allegedly said:

> Actually I was wondering why you posted all of that... it was kinda from
> left field.

You never know who is interested in what. So I toss it out there and see
what happens. Maybe nothing. In this case, Bruce Simpson asked a pertinent
question....so I deem it to have been worth it so far.

No doubt it would be a new experience for many people.
I only posted a small part of the maillog. Maybe 20 entries.

--
defenestrate: The act of throwing Windows out the window and replacing it on
your PC with some other operating system.

Re: SPAM that never made it.......
 

In article <hKWnb.3923$ws.374949@news02.tsnz.net>, steve@unowut.org
says...
> My sendmail-based mail server has been doing a great job of preventing known
> spammers from even connecting to me.

<snip>

If they weren't connecting to you, your "sendmail-based mail server"
wouldn't be logging them.

Are you implying you're reducing your internet traffic? - or just
avoiding reading the chit?

--
Duncan

Re: SPAM that never made it.......
 

T-Boy allegedly said:

> In article <hKWnb.3923$ws.374949@news02.tsnz.net>, steve@unowut.org
> says...
>> My sendmail-based mail server has been doing a great job of preventing
>> known spammers from even connecting to me.
>
> <snip>
>
> If they weren't connecting to you, your "sendmail-based mail server"
> wouldn't be logging them.

It logs the connection attempts....and consequent rejections. I do not
receive the mail they tried to send.

> Are you implying you're reducing your internet traffic? - or just
> avoiding reading the chit?

Both. They can't send me the e-mail they wanted to send...and I therefore
don't have to read it, either.

As you mention, it also reduces the amount of data traffic to me. I don't
feel like paying for mail I don't want.


--
defenestrate: The act of throwing Windows out the window and replacing it on
your PC with some other operating system.

Re: SPAM that never made it.......
 

On Fri, 31 Oct 2003 12:45:06 +1300, steve <steve@unowut.org> wrote:

>T-Boy allegedly said:
>
>> In article <hKWnb.3923$ws.374949@news02.tsnz.net>, steve@unowut.org
>> says...
>>> My sendmail-based mail server has been doing a great job of preventing
>>> known spammers from even connecting to me.
>>
>> <snip>
>>
>> If they weren't connecting to you, your "sendmail-based mail server"
>> wouldn't be logging them.
>
>It logs the connection attempts....and consequent rejections. I do not
>receive the mail they tried to send.
>
>> Are you implying you're reducing your internet traffic? - or just
>> avoiding reading the chit?
>
>Both. They can't send me the e-mail they wanted to send...and I therefore
>don't have to read it, either.
>
>As you mention, it also reduces the amount of data traffic to me. I don't
>feel like paying for mail I don't want.