SPAM that never made it.......

Discussion in 'NZ Computing' started by Bruce Simpson, Oct 29, 2003.

  1. On Thu, 30 Oct 2003 10:58:36 +1300, steve <> wrote:

    >My sendmail-based mail server has been doing a great job of preventing known
    >spammers from even connecting to me.
    >
    >With Xmas approaching, the rate of spam seems to have majorly escalated in
    >the past 2 weeks.
    >
    >Here are just some of the SPAM attempts that were blocked yesterday....while
    >5 actual spams did get through. They won't make it today if they try
    >again.


    ><>... REJECTED - Due to excessive SPAM from
    >Hotmail,we no longer accept mail from this doman.Please send mail from a
    >responsible ISP


    >h9SKsBf02939: ruleset=check_mail, arg1=<>,
    >relay=node-d-17cd.a2000.nl [62.195.23.205], reject=550 5.0.0
    ><>... REJECT - Too much SPAM from MSN.COM


    >h9T0nAf03280: ruleset=check_mail, arg1=<>,
    >relay=adsl-67-66-79-41.dsl.elpstx.swbell.net [67.66.79.41], reject=550
    >5.0.0 <>... REJECTED - Too much SPAM from Yahoo


    Are you rejecting emails because they actually come from
    msn/hotmail/yahoomail servers or because they have
    @hotmail/yahoomail/msn "from" addresses but don't actually originate
    from the relevent networks?


    --
    you can contact me via http://aardvark.co.nz/contact/
    Bruce Simpson, Oct 29, 2003
    #1
    1. Advertising

  2. Bruce Simpson

    steve Guest

    My sendmail-based mail server has been doing a great job of preventing known
    spammers from even connecting to me.

    With Xmas approaching, the rate of spam seems to have majorly escalated in
    the past 2 weeks.

    Here are just some of the SPAM attempts that were blocked yesterday....while
    5 actual spams did get through. They won't make it today if they try
    again.

    *************************************************************

    MAILLOG

    **Unmatched Entries**

    NOQUEUE: 216-201-91-37.cpe-dsl.octapus.com [216.201.91.37] did not issue
    MAIL/EXPN/VRFY/ETRN during connection to MTA

    h9SHNmf02681: ruleset=check_mail, arg1=<>,
    relay=bm-2a.paradise.net.nz [202.0.58.21], reject=550 5.7.1
    <>... Access denied

    h9SIrBf02774: ruleset=check_relay, arg1=[211.220.64.52], arg2=211.220.64.52,
    relay=[211.220.64.52], reject=550 5.7.1 Access denied

    NOQUEUE: [211.220.64.52] did not issue MAIL/EXPN/VRFY/ETRN during connection
    to MTA

    h9SKgLf02916: ruleset=check_relay, arg1=msr27.hinet.net, arg2=168.95.4.127,
    relay=msr27.hinet.net [168.95.4.127], reject=550 5.7.1 Access denied

    NOQUEUE: msr27.hinet.net [168.95.4.127] did not issue MAIL/EXPN/VRFY/ETRN
    during connection to MTA

    NOQUEUE: customer-CLN-54-12.megared.net.mx [200.77.54.12] (may be forged)
    did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

    h9SKlOf02928: ruleset=check_mail, arg1=<>,
    relay=user-0ce2fp6.cable.mindspring.com [24.225.63.38], reject=550 5.7.1
    <>... Access denied

    h9SKrtf02936: ruleset=check_mail, arg1=<>,
    relay=bm-1a.paradise.net.nz [202.0.58.20], reject=550 5.0.0
    <>... REJECTED - Due to excessive SPAM from
    Hotmail,we no longer accept mail from this doman.Please send mail from a
    responsible ISP

    h9SKsBf02939: ruleset=check_mail, arg1=<>,
    relay=node-d-17cd.a2000.nl [62.195.23.205], reject=550 5.0.0
    <>... REJECT - Too much SPAM from MSN.COM

    h9SMf9f03104: ruleset=check_relay, arg1=[211.48.23.192], arg2=211.48.23.192,
    relay=[211.48.23.192], reject=550 5.7.1 Access denied

    NOQUEUE: [211.48.23.192] did not issue MAIL/EXPN/VRFY/ETRN during connection
    to MTA

    h9SNxhf03223: ruleset=check_relay, arg1=[218.79.219.100],
    arg2=218.79.219.100, relay=[218.79.219.100], reject=550 5.7.1 Access denied
    NOQUEUE: [218.79.219.100] did not issue MAIL/EXPN/VRFY/ETRN during
    connection to MTA

    h9T0mwf03275: ruleset=check_relay, arg1=[211.244.171.224],
    arg2=211.244.171.224, relay=znyf@[211.244.171.224], reject=550 5.7.1 Access
    denied

    NOQUEUE: znyf@[211.244.171.224] did not issue MAIL/EXPN/VRFY/ETRN during
    connection to MTA

    h9T0n2f03277: ruleset=check_mail, arg1=<>,
    relay=[63.230.8.25], reject=550 5.7.1 <>... Access
    denied

    h9T0nAf03280: ruleset=check_mail, arg1=<>,
    relay=adsl-67-66-79-41.dsl.elpstx.swbell.net [67.66.79.41], reject=550
    5.0.0 <>... REJECTED - Too much SPAM from Yahoo

    h9T0nDf03282: ruleset=check_mail, arg1=<>,
    relay=d57-19-246.home.cgocable.net [24.57.19.246], reject=550 5.7.1
    <>... Access denied

    h9T0nGf03283: ruleset=check_relay, arg1=[218.9.22.82], arg2=218.9.22.82,
    relay=[218.9.22.82], reject=550 5.7.1 Access denied

    NOQUEUE: [218.9.22.82] did not issue MAIL/EXPN/VRFY/ETRN during connection
    to MTA

    h9T0nNf03285: ruleset=check_mail, arg1=<>,
    relay=03.pacbell.net [68.121.178.49],
    reject=550 5.0.0 <>... REJECTED - Too much SPAM
    from Yahoo

    h9T0nUf03287: ruleset=check_mail, arg1=<>,
    relay=c213-100-136-141.swipnet.se [213.100.136.141], reject=550 5.7.1
    <>... Access denied

    h9T0nWf03289: ruleset=check_mail, arg1=<>,
    relay=c68.118.127.2.ts46v-01.rckprt.tx.charter.com [68.118.127.2],
    reject=550 5.0.0 <>... REJECTED - Too much
    SPAM from Yahoo

    h9T0nZf03291: ruleset=check_mail, arg1=<>,
    relay=ed-dhcp128.ed.arizona.edu [128.196.101.128], reject=550 5.0.0
    <>... REJECTED - Too much SPAM from Yahoo

    h9T0nif03293: ruleset=check_mail, arg1=<>,
    relay=pD9E969AC.dip.t-dialin.net [217.233.105.172], reject=550 5.0.0
    <>... REJECTED - Too much SPAM from Yahoo

    h9T1Exf03321: ruleset=check_relay, arg1=[211.90.158.94],

    ......etc.....

    --
    defenestrate: The act of throwing Windows out the window and replacing it on
    your PC with some other operating system.
    steve, Oct 29, 2003
    #2
    1. Advertising

  3. Bruce Simpson

    T.N.O. Guest

    steve wrote:
    > Here are just some of the SPAM attempts that were blocked yesterday....while
    > 5 actual spams did get through. They won't make it today if they try
    > again.
    > *************************************************************


    wow, ummm thanks.
    T.N.O., Oct 29, 2003
    #3
  4. Bruce Simpson

    steve Guest

    T.N.O. allegedly said:

    > steve wrote:
    >> Here are just some of the SPAM attempts that were blocked
    >> yesterday....while
    >> 5 actual spams did get through. They won't make it today if they try
    >> again.
    >> *************************************************************

    >
    > wow, ummm thanks.


    :)

    You're welcome.

    --
    defenestrate: The act of throwing Windows out the window and replacing it on
    your PC with some other operating system.
    steve, Oct 30, 2003
    #4
  5. Bruce Simpson

    steve Guest

    Bruce Simpson allegedly said:

    > Are you rejecting emails because they actually come from
    > msn/hotmail/yahoomail servers or because they have
    > @hotmail/yahoomail/msn "from" addresses but don't actually originate
    > from the relevent networks?


    The latter.

    Most of this mail is from zombie clients run by idiots who don't even know
    they have been hacked. I prefer not to block thier IPs as the domain names
    used are more of less constant: hotmail / yahoo / aol / excite / bigfoot.

    I counted for several weeks. I received hundreds of spam from the sourcs
    above...and the ONLY legit Hotmail and yahoo mail was from my siblings.
    They now send e-mail to a different address, set up only for their use and
    not seen anywhere else by anyone. I never get spam there.

    So blocking these gains me a lot and costs me nothing. I read my logs
    daily. If there is anything there that looks like someone I want to hear
    from, I will send them a note asking them if they tried to contact me and
    telling them how they can.

    That happens *very* rarely. Easily 99.99% (literally 9999 out of 10,000) of
    this stuff is pure spam. I've caught perhaps 5 genuine e-mails being
    bounced in 18 months.....out of 50-100 / *day*.

    --
    defenestrate: The act of throwing Windows out the window and replacing it on
    your PC with some other operating system.
    steve, Oct 30, 2003
    #5
  6. Bruce Simpson

    T.N.O. Guest

    steve wrote:

    > T.N.O. allegedly said:
    >
    >
    >>steve wrote:
    >>
    >>>Here are just some of the SPAM attempts that were blocked
    >>>yesterday....while
    >>>5 actual spams did get through. They won't make it today if they try
    >>>again.
    >>>*************************************************************

    >>
    >>wow, ummm thanks.

    >
    >
    > :)
    >
    > You're welcome.
    >


    Actually I was wondering why you posted all of that... it was kinda from
    left field.
    T.N.O., Oct 30, 2003
    #6
  7. Bruce Simpson

    steve Guest

    T.N.O. allegedly said:

    > Actually I was wondering why you posted all of that... it was kinda from
    > left field.


    You never know who is interested in what. So I toss it out there and see
    what happens. Maybe nothing. In this case, Bruce Simpson asked a pertinent
    question....so I deem it to have been worth it so far.

    No doubt it would be a new experience for many people.
    I only posted a small part of the maillog. Maybe 20 entries.

    --
    defenestrate: The act of throwing Windows out the window and replacing it on
    your PC with some other operating system.
    steve, Oct 30, 2003
    #7
  8. Bruce Simpson

    T-Boy Guest

    In article <hKWnb.3923$>,
    says...
    > My sendmail-based mail server has been doing a great job of preventing known
    > spammers from even connecting to me.


    <snip>

    If they weren't connecting to you, your "sendmail-based mail server"
    wouldn't be logging them.

    Are you implying you're reducing your internet traffic? - or just
    avoiding reading the chit?

    --
    Duncan
    T-Boy, Oct 30, 2003
    #8
  9. Bruce Simpson

    steve Guest

    T-Boy allegedly said:

    > In article <hKWnb.3923$>,
    > says...
    >> My sendmail-based mail server has been doing a great job of preventing
    >> known spammers from even connecting to me.

    >
    > <snip>
    >
    > If they weren't connecting to you, your "sendmail-based mail server"
    > wouldn't be logging them.


    It logs the connection attempts....and consequent rejections. I do not
    receive the mail they tried to send.

    > Are you implying you're reducing your internet traffic? - or just
    > avoiding reading the chit?


    Both. They can't send me the e-mail they wanted to send...and I therefore
    don't have to read it, either.

    As you mention, it also reduces the amount of data traffic to me. I don't
    feel like paying for mail I don't want.


    --
    defenestrate: The act of throwing Windows out the window and replacing it on
    your PC with some other operating system.
    steve, Oct 30, 2003
    #9
  10. Bruce Simpson

    Jerry Guest

    On Fri, 31 Oct 2003 12:45:06 +1300, steve <> wrote:

    >T-Boy allegedly said:
    >
    >> In article <hKWnb.3923$>,
    >> says...
    >>> My sendmail-based mail server has been doing a great job of preventing
    >>> known spammers from even connecting to me.

    >>
    >> <snip>
    >>
    >> If they weren't connecting to you, your "sendmail-based mail server"
    >> wouldn't be logging them.

    >
    >It logs the connection attempts....and consequent rejections. I do not
    >receive the mail they tried to send.
    >
    >> Are you implying you're reducing your internet traffic? - or just
    >> avoiding reading the chit?

    >
    >Both. They can't send me the e-mail they wanted to send...and I therefore
    >don't have to read it, either.
    >
    >As you mention, it also reduces the amount of data traffic to me. I don't
    >feel like paying for mail I don't want.
    Jerry, Oct 31, 2003
    #10
  11. Bruce Simpson

    Jerry Guest

    On Fri, 31 Oct 2003 12:45:06 +1300, steve <> wrote:

    >T-Boy allegedly said:
    >
    >> In article <hKWnb.3923$>,
    >> says...
    >>> My sendmail-based mail server has been doing a great job of preventing
    >>> known spammers from even connecting to me.

    >>
    >> <snip>
    >>
    >> If they weren't connecting to you, your "sendmail-based mail server"
    >> wouldn't be logging them.

    >
    >It logs the connection attempts....and consequent rejections. I do not
    >receive the mail they tried to send.
    >
    >> Are you implying you're reducing your internet traffic? - or just
    >> avoiding reading the chit?

    >
    >Both. They can't send me the e-mail they wanted to send...and I therefore
    >don't have to read it, either.
    >
    >As you mention, it also reduces the amount of data traffic to me. I don't
    >feel like paying for mail I don't want.


    You have already paid for it, it got all the way to your ISPs server

    Jerry
    Jerry, Oct 31, 2003
    #11
  12. Bruce Simpson

    Mainlander Guest

    In article <>,
    ess says...
    > On Thu, 30 Oct 2003 10:58:36 +1300, steve <> wrote:
    >
    > >My sendmail-based mail server has been doing a great job of preventing known
    > >spammers from even connecting to me.
    > >
    > >With Xmas approaching, the rate of spam seems to have majorly escalated in
    > >the past 2 weeks.
    > >
    > >Here are just some of the SPAM attempts that were blocked yesterday....while
    > >5 actual spams did get through. They won't make it today if they try
    > >again.

    >
    > ><>... REJECTED - Due to excessive SPAM from
    > >Hotmail,we no longer accept mail from this doman.Please send mail from a
    > >responsible ISP

    >
    > >h9SKsBf02939: ruleset=check_mail, arg1=<>,
    > >relay=node-d-17cd.a2000.nl [62.195.23.205], reject=550 5.0.0
    > ><>... REJECT - Too much SPAM from MSN.COM

    >
    > >h9T0nAf03280: ruleset=check_mail, arg1=<>,
    > >relay=adsl-67-66-79-41.dsl.elpstx.swbell.net [67.66.79.41], reject=550
    > >5.0.0 <>... REJECTED - Too much SPAM from Yahoo

    >
    > Are you rejecting emails because they actually come from
    > msn/hotmail/yahoomail servers or because they have
    > @hotmail/yahoomail/msn "from" addresses but don't actually originate
    > from the relevent networks?


    What a whinger. "Due to excessive spam from Hotmail..." - hates free mail
    services that people sign up to in droves, or more likely hates Microsoft
    Mainlander, Oct 31, 2003
    #12
  13. Bruce Simpson

    Mainlander Guest

    In article <>,
    ess says...
    > On Thu, 30 Oct 2003 10:58:36 +1300, steve <> wrote:
    >
    > >My sendmail-based mail server has been doing a great job of preventing known
    > >spammers from even connecting to me.
    > >
    > >With Xmas approaching, the rate of spam seems to have majorly escalated in
    > >the past 2 weeks.
    > >
    > >Here are just some of the SPAM attempts that were blocked yesterday....while
    > >5 actual spams did get through. They won't make it today if they try
    > >again.

    >
    > ><>... REJECTED - Due to excessive SPAM from
    > >Hotmail,we no longer accept mail from this doman.Please send mail from a
    > >responsible ISP

    >
    > >h9SKsBf02939: ruleset=check_mail, arg1=<>,
    > >relay=node-d-17cd.a2000.nl [62.195.23.205], reject=550 5.0.0
    > ><>... REJECT - Too much SPAM from MSN.COM

    >
    > >h9T0nAf03280: ruleset=check_mail, arg1=<>,
    > >relay=adsl-67-66-79-41.dsl.elpstx.swbell.net [67.66.79.41], reject=550
    > >5.0.0 <>... REJECTED - Too much SPAM from Yahoo

    >
    > Are you rejecting emails because they actually come from
    > msn/hotmail/yahoomail servers or because they have
    > @hotmail/yahoomail/msn "from" addresses but don't actually originate
    > from the relevent networks?


    He's a whinger.

    I know a lot of people that have hotmail accounts. Fortunately
    responsible ISPs don't block mail from Hotmail / Yahoo etc just because
    they hate the ISP or are a whinging leftie who tells people they
    shouldn't use hotmail because Microsoft wants to rule the world.
    Mainlander, Oct 31, 2003
    #13
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Fred A Stover
    Replies:
    7
    Views:
    850
    pcbutts1
    Dec 26, 2007
  2. Andrew Tang
    Replies:
    0
    Views:
    640
    Andrew Tang
    Jul 5, 2003
  3. Pikoro
    Replies:
    1
    Views:
    608
    Ronnie Broyles
    Jul 6, 2003
  4. xxx xxx
    Replies:
    3
    Views:
    718
  5. chris
    Replies:
    0
    Views:
    602
    chris
    Jul 7, 2003
Loading...

Share This Page