Re: [OT] e-mail account hi-jacked?

["Chris Bond" <chris@xxxxxxx>]

Dont forget this verisign b******ks is causing a lot of spam to get
through that it should do.  What a lot of isps do as a first check
is check the domain exists then if it does accept it, as a lot of
spammers use fake domain names.

At RH we use SpamAssisgn and the user can enable it in there control
panel and get it to move it to a spam box - its 99% effective in
most cases.  You can add whitelists for example, if someone sends
you a lot of html emails this is often tagged as spam and you would
need to whitelist them.

Kind Regards,
Chris Bond

--- In ukha_d@xxxxxxx, "Alex Monaghan" <ha@m...> wrote:
> Rob,
>
> Do a google search on email headers, this will give you the path
the mail
> followed, but my guess is that tha mail will originate from a far
east
> insecure mail relay and you'll get no response from your files
abuse
> complaint :-(
>
> I'm currently at about 600 over the last week or so and it's only
just
> started to tail off :-(
>
> Problem is that the mail protocols were developed when we all
trusted each
> other so there's nothing to stop these low life *****'s.
>
> > -----Original Message-----
> > From: Rob Lamb [mailto:rjl@xxxxxxx...]
> > Sent: Tuesday, September 23, 2003 9:16 AM
> > To: ukha_d@xxxxxxx
> > Subject: [ukha_d] Re: [OT] e-mail account hi-jacked?
> >
> >
> > Switched my machine on this morning and got 143 NDRs along with
the
> > usual amount of crap. This is driving me nuts and I'm worried
about
> > being blocked because of this.
> >
> > How can I find out who's sending these (if it possible at all)?
> >
> > Rob
> >
> > --- In ukha_d@xxxxxxx, <mrf@p...> wrote:
> > > Sorry, I should have been clearer. I meant, it's someone
sending a
> > virus to
> > > you, not that you HAVE one.
> > >
> > > The NDR's seem harmless, but they are usually accompanied by
a
> > email
> > > appearing to be from Microsoft with a patch attached.. the
> > attachment is of
> > > course, the virus. I'm not sure what the NDR's are for, but
they
> > are
> > > definitely due to the virus.
> > >
> > > I'm still receiving copies of it now. I know my PC is clean,
but
> > someone
> > > with my name in their address book has been infected. I must
get
> > about 5
> > > copies a day ! and I am also getting the NDR's ! They are
usually
> > >
> > > Cheers
> > >
> > > Marc
> > >
> > >   -----Original Message-----
> > >   From: Rob Lamb [mailto:rjl@xxxxxxx...]
> > >   Sent: 22 September 2003 20:12
> > >   To: ukha_d@xxxxxxx
> > >   Subject: [ukha_d] Re: [OT] e-mail account hi-jacked?
> > >
> > >
> > >   Thanks for the advice but no virus found and all machines
are
> > >   running up to date anti-virus software. It's a real PITA
as
I do
> > >   sometimes get some genuine ones when I've got an address
wrong.
> > >   Spamnet is coping with it but I still have to check them
in
case
> > >   it's a legitimate one.
> > >
> > >   Rob
> > >
> > >   --- In ukha_d@xxxxxxx, <mrf@p...> wrote:
> > >   > It's a virus. W32.Sven or something like that. You'll
probably
> > be
> > >   getting
> > >   > microsoft patches too ? Just delete em, and be sure
to scan
> > your
> > >   PC.
> > >   >
> > >   >
> > >   >
> > >
> >
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@xxxxxxx.
> > >   ..
> > >   >
> > >   > Cheers
> > >   >
> > >   > Marc
> > >   >   -----Original Message-----
> > >   >   From: Rob Lamb [mailto:rjl@xxxxxxx...]
> > >   >   Sent: 22 September 2003 14:09
> > >   >   To: ukha_d@xxxxxxx
> > >   >   Subject: [ukha_d] [OT] e-mail account hi-jacked?
> > >   >
> > >   >
> > >   >   Since the weekend I've been receiving a shed load
> > of "undelivered
> > >   >   mail" automated responses to mail that I've
never sent
>from
> > >   generic
> > >   >   but different addresses at one of my domains. Is
this
> > something
> > >   to
> > >   >   be worried about or has someone just jumped on an
address
> > >   bandwagon
> > >   >   and is spoofing the addresses?
> > >   >
> > >   >   Has anyone else had this problem?
> > >   >
> > >   >   Rob
> > >   >
> > >   >
> > >   >         Yahoo! Groups Sponsor
> > >   >               ADVERTISEMENT
> > >   >
> > >   >
> > >   >
> > >   >
> > >   >   ** UKHA2004 BE THERE! ** - start planning now.
> > >   >
> > >   >   http://www.automatedhome.co.uk
> > >   >   Post message: ukha_d@xxxxxxx
> > >   >   Subscribe:  ukha_d-subscribe@xxxxxxx
> > >   >   Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > >   >   List owner:  ukha_d-owner@xxxxxxx
> > >   >
> > >   >   Your use of Yahoo! Groups is subject to the Yahoo!
Terms
of
> > >   Service.
> > >   >
> > >   >
> > >   > [Non-text portions of this message have been removed]
> > >
> > >
> > >         Yahoo! Groups Sponsor
> > >               ADVERTISEMENT
> > >
> > >
> > >
> > >
> > >   ** UKHA2004 BE THERE! ** - start planning now.
> > >
> > >   http://www.automatedhome.co.uk
> > >   Post message: ukha_d@xxxxxxx
> > >   Subscribe:  ukha_d-subscribe@xxxxxxx
> > >   Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > >   List owner:  ukha_d-owner@xxxxxxx
> > >
> > >   Your use of Yahoo! Groups is subject to the Yahoo! Terms
of
> > Service.
> > >
> > >
> > > [Non-text portions of this message have been removed]
> >
> >
> > ------------------------ Yahoo! Groups Sponsor
> > ---------------------~--> Buy Remanufactured Ink Cartridges
&
> > Refill Kits at MyInks.com for: HP $8-20. Epson $3-9, Canon
> > $5-15, Lexmark $4-17. Free s/h over $50 (US & Canada).
> http://www.c1tracking.com/l.asp?cid=6351
> http://us.click.yahoo.com/0zJuRD/6CvGAA/qnsNAA/IBOolB/TM
> -------------------------------------------------------------------
--~->
>
> ** UKHA2004 BE THERE! ** - start planning now.
>
> http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/