Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Thread

Linode and reporting spam back to ISPs

Linode and reporting spam back to ISPs

2017-11-28 by Bill Levering

Anyone notice that Linode’ s address space appears to have recently grown significantly?

I only get UGG Outlet and Sunglasses spam from their address space, which is why I notice.

Also… what is the consensus of reporting spam back to the originating ISP?

I used to do this faithfully, by attaching the original message in a new email back to the abuse/spam address listed on the ISP website. 
That way the ISP will have ALL the info needed to prove that it was spam and where it originated.

But Microsnot/Outlook in their infinite wisdom doesn’t allow attachments. 
So I used to forward the emails to them with a new subject line. Well… they then decided I was a spammer and started blocking all mail from my server!
I had to call them to get the block lifted, but I’m now on probation...

Most of the time I don’t get any response, so I wonder if reporting is a wasted effort.

Bill

Re: [milter-greylist] Linode and reporting spam back to ISPs

2017-11-28 by manu@...

Bill Levering idbill@... [milter-greylist]
<milter-greylist@yahoogroups.com> wrote:

> Also… what is the consensus of reporting spam back to the originating ISP?

I never do it, mostly because I lack time, but also because DNSRBL tend
to automatically notify ISP that they are used to send spam.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...

Re: [milter-greylist] Linode and reporting spam back to ISPs

2017-11-28 by John_Damm_S=c3=b8rensen

I have stopped doing it, because I seldom got any useful answers back. I 
have also tried to contact sites that has been hacked with the same result.
Nobody seems to care.
/john

Den 29-11-2017 kl. 00:49 skrev manu@... [milter-greylist]:
Show quoted textHide quoted text
>
> Bill Levering idbill@... [milter-greylist]
> <milter-greylist@yahoogroups.com> wrote:
>
> > Also\u2026 what is the consensus of reporting spam back to the 
> originating ISP?
>
> I never do it, mostly because I lack time, but also because DNSRBL tend
> to automatically notify ISP that they are used to send spam.
>
> -- 
> Emmanuel Dreyfus
> http://hcpnet.free.fr/pubz
> manu@...
>
>

Re: [milter-greylist] Linode and reporting spam back to ISPs

2017-11-29 by Richard Johnsson

My mail server is at Linode. I get a spam complaint ticket from Linode 
every 2-3 months. All are bogus, and it takes a lot of time to respond 
to them.


On 11/28/2017 12:16 PM, Bill Levering idbill@... [milter-greylist] 
wrote:
Show quoted textHide quoted text
>
>
> Anyone notice that Linode\u2019 s address space appears to have recently 
> grown significantly?
>
> I only get UGG Outlet and Sunglasses spam from their address space, 
> which is why I notice.
>
> Also\u2026 what is the consensus of reporting spam back to the originating ISP?
>
> I used to do this faithfully, by attaching the original message in a 
> new email back to the abuse/spam address listed on the ISP website.
> That way the ISP will have ALL the info needed to prove that it was 
> spam and where it originated.
>
> But Microsnot/Outlook in their infinite wisdom doesn\u2019t allow attachments.
> So I used to forward the emails to them with a new subject line. Well\u2026 
> they then decided I was a spammer and started blocking all mail from 
> my server!
> I had to call them to get the block lifted, but I\u2019m now on probation...
>
> Most of the time I don\u2019t get any response, so I wonder if reporting is 
> a wasted effort.
>
> Bill
>
>

Re: [milter-greylist] Linode and reporting spam back to ISPs

2017-11-29 by Bill Levering

Richard,

I’m curious now.

When you say bogus, is it that the sending ip was forged or the person reporting didn’t investigate closely enough?

(I can provide headers for a recent UGG spam if you want an example.)

Bill
Show quoted textHide quoted text
> On Nov 28, 2017, at 7:50 PM, Richard Johnsson johnsson@hamilton.com [milter-greylist] <milter-greylist@yahoogroups.com> wrote:
> 
> 
> 
> My mail server is at Linode. I get a spam complaint ticket from Linode every 2-3 months. All are bogus, and it takes a lot of time to respond to them.
> 
> 
> On 11/28/2017 12:16 PM, Bill Levering idbill@... [milter-greylist] wrote:
>> 
>> Anyone notice that Linode’ s address space appears to have recently grown significantly?
>> 
>> I only get UGG Outlet and Sunglasses spam from their address space, which is why I notice.
>> 
>> Also… what is the consensus of reporting spam back to the originating ISP?
>> 
>> I used to do this faithfully, by attaching the original message in a new email back to the abuse/spam address listed on the ISP website. 
>> That way the ISP will have ALL the info needed to prove that it was spam and where it originated.
>> 
>> But Microsnot/Outlook in their infinite wisdom doesn’t allow attachments. 
>> So I used to forward the emails to them with a new subject line. Well… they then decided I was a spammer and started blocking all mail from my server!
>> I had to call them to get the block lifted, but I’m now on probation...
>> 
>> Most of the time I don’t get any response, so I wonder if reporting is a wasted effort.
>> 
>> Bill
>> 
> 
> 
> 
>

Re: [milter-greylist] Linode and reporting spam back to ISPs

2017-11-29 by Richard Johnsson

The complaints I have received generally fall into two categories:

1. The offending message falsely pretends to be from one of my domains, 
even though the tracking information in the header shows that the 
message never came anywhere near my server. This is usually the result 
of automated reporting by some email provider which does no 
investigating at all, preferring to push that load onto others.

2. A complaint about an automated response to spam my server received 
which came from a forged address. E.g. one of my users received a forged 
message from an aol.com address and sends an automated response. The aol 
user then complains that the automated response is spam. I've even 
gotten complaints about "no such user" bounce messages in response to 
forged spam where the complaint is about the content of the original 
message included in the bounce.

I'm not suggesting that there isn't spam originating from Linode 
addresses. Just that Linode takes complaints seriously and requires its 
customers to respond to complaints.

Richard


On 11/28/2017 10:00 PM, Bill Levering idbill@... [milter-greylist] 
wrote:
Show quoted textHide quoted text
>
> Richard,
>
> I\u2019m curious now.
>
> When you say bogus, is it that the sending ip was forged or the person 
> reporting didn\u2019t investigate closely enough?
>
> (I can provide headers for a recent UGG spam if you want an example.)
>
> Bill
>
> > On Nov 28, 2017, at 7:50 PM, Richard Johnsson johnsson@... 
> [milter-greylist] <milter-greylist@yahoogroups.com> wrote:
> >
> >
> >
> > My mail server is at Linode. I get a spam complaint ticket from 
> Linode every 2-3 months. All are bogus, and it takes a lot of time to 
> respond to them.
> >
> >
> > On 11/28/2017 12:16 PM, Bill Levering idbill@... 
> [milter-greylist] wrote:
> >>
> >> Anyone notice that Linode\u2019 s address space appears to have recently 
> grown significantly?
> >>
> >> I only get UGG Outlet and Sunglasses spam from their address space, 
> which is why I notice.
> >>
> >> Also\u2026 what is the consensus of reporting spam back to the 
> originating ISP?
> >>
> >> I used to do this faithfully, by attaching the original message in 
> a new email back to the abuse/spam address listed on the ISP website.
> >> That way the ISP will have ALL the info needed to prove that it was 
> spam and where it originated.
> >>
> >> But Microsnot/Outlook in their infinite wisdom doesn\u2019t allow 
> attachments.
> >> So I used to forward the emails to them with a new subject line. 
> Well\u2026 they then decided I was a spammer and started blocking all mail 
> from my server!
> >> I had to call them to get the block lifted, but I\u2019m now on probation...
> >>
> >> Most of the time I don\u2019t get any response, so I wonder if reporting 
> is a wasted effort.
> >>
> >> Bill
> >>
> >
> >
> >
> >
>
>

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.