RE: Spam email problem

["Alex Monaghan" <ha@xxxxxxxxxxxxxx>]

Oops, too tired, I thought this was in a work email box!

The problem is that email was designed long time ago and a lot of the
parameters in an email are taken on trust and hence easily forged. I
remember many years ago writing something to send email responses to
in-house support tickets and the email administrator was amazed that I was
able to piggyback onto his mail server and send mail as my application so
easily. A server based spam filter will often check the originator email
and
reject it if the DNS records don't match the originator, some systems will
filter on mail content, against blacklists and so on.

Alex



-----Original Message-----
From: Alex Monaghan [mailto:alex@xxxxxxx]
Sent: 03 October 2012 20:41
To: 'ukha_d@xxxxxxx'
Subject: RE: [ukha_d] Spam email problem

Tim,

We are without spam filtering on the server at the moment, so you'll see a
little more spam than usual. There was a major issue during an automated
update the other night which broke the email setup on the servers (all the
cPanel ones that I run). I will be looking at re-introducing spam filtering
shortly once I'm happy that the email is stable again.

Alex

-----Original Message-----
From: ukha_d@xxxxxxx [mailto:ukha_d@xxxxxxx] On Behalf Of
Tim Hawes
Sent: 03 October 2012 17:01
To: ukha_d@xxxxxxx
Subject: [ukha_d] Spam email problem

Hi all,

I usually ignore this sort of stuff, but...
Just recently I've been receiving spam email appearing to come from a
domain
that I own. The email address used is *almost* a valid one - the first part
is prefixed with the word "email" and the rest of the address is
real, so
e.g. EMAILmyname@xxxxxxx however it was sent via "mthai.com".
A whois search finds this operating out of Thailand.

I've checked my domain and the address does not exist there, so I don't
think that has been hacked. The from and to addresses in the spam messages
are the same (as above) and are being caught by my "bucket"
address on the
server.

So, why now? why me? why 20-30 messages in the last few days?
Would it appear that my domain is being used to send spam? (I don't think
it
actually is, but it maybe looks that way to the casual recipient of one of
these messages?).

Should I be any more bothered than I am about "random" spam
messages?
Is it possible to filter-out these specific messages at the (my) mail
server?

Many thanks,
Tim.


[Non-text portions of this message have been removed]



------------------------------------