Since we have so many geeks here ...

[matthewt]

Can anyone give me some advice on what to do about my domain (nitor.co.nz) being used in spam ??

Some clowns in the States are spamming the usual crap but in the From: address they put something like abcjones@nitor.co.nz

And since all email to nitor.co.nz comes to me I end up with all the anti-spam abuse and the bouces when they send to email addresses that don't exist. I'm currently getting 50-60 emails a day and the number seems to be rising.

I had a look at the message headers but can't see anything to trace it back to the source. And even if I did do you think they'd listen ??

I leant today this is called a "Joe Job" after some guy called Joe (no really that was his name) pissed someone off so they used his email in the From: and spammed a truck load of people/groups. The end result was poor Joe getting flooded with stuff coming back from the spam.

[White trash]

So ask yourself, "Who have I pissed off lately?"

That's a dirty, low down, chicken shit sort of thing to do.

[jrandom]

So ask yourself, "Who have I pissed off lately?"

That's a dirty, low down, chicken shit sort of thing to do.

It's completely random and impersonal, guys. It's like having your machine compromised and taken over by automated scanning software. It's not a targeted attack. In this case, Matt's domain has just been swept up into a list that is being used for fake sending addresses by spammers.

Matt - you could try posting to NANAE on USENET (news.admin.net-abuse.email), or looking around for the group FAQ, or googling for past posts in the group on the subject of fixing this problem. I think you're pretty much buggered, though. You can't stop spammers from putting your domain in the 'From' field.

[danb]

Setup your email server up proplery so that it drops the emails when your email server cant find the username on your server.

If it is your email address that is getting bombed setup auto responder on your email address so that when an important email come through they can send it to a new email address that isent getting bombed.

If you still cant work it all out PM me as I have setup my website and email system -> www.computec.dynu.com

[James Deuce]

Setup your email server up proplery so that it drops the emails when your email server cant find the username on your server.

If it is your email address that is getting bombed setup auto responder on your email address so that when an important email come through they can send it to a new email address that isent getting bombed.

If you still cant work it all out PM me as I have setup my website and email system -> www.computec.dynu.com

What he said, but without the sarcasm :)

[Drunken Monkey]

Yeah, what DanB said.
Once they hit your catchall, the only way to filter is if you use a proper mail server to sort the incoming into accounts. A lot of 'spam' recently has been made up of email viruses using 'spoofing' to hide the real source as well, which is a right pain in the nut - you might not have any way of eliminating the postmaster alerts fully.

[PuppetMaster]

Yup yup yup...bastards.

Dan is right. You need a mail server of some description. Search the net for free simple mapi mail servers, or a gateway product that can filter messages.
Try Mdaemon, thats not free though, i think.

[danb]

Yup yup yup...bastards.

Dan is right. You need a mail server of some description. Search the net for free simple mapi mail servers, or a gateway product that can filter messages.
Try Mdaemon, thats not free though, i think.


If you have access to the email server and you can install software on it get the best free email server software availiable. Check out http://www.argosoft.com to download it. I have the Pro version on my email server and if you want to see a running demo of it setup an email address on my email server http://www.computec.dynu.com:81
If you can (with your current setup) put your current email address on hold or dissabe it so emails dont go through. If it bots or something that is sending the emails they will see that the emails are not going through and stop sending to you.




TIP for everyone!!!!
With any website that I sign up to have a separate email address for doing the registeration. Most of the websites that you sign up sell there gathered email address to spamming company’s, there for you get shitloads of spam emails. In one of my email accounts that I use for this I can expect up to 1000 emails a day :doh: I hardly ever check it unless its one of these sites like mine that require you to confirm your email address. With argosoft you have a select all button you can delete all the bullshit in one hit :yes:



Again if ya want to know something I am quite famiar with this sort of thing myself having run my own website etc send me a PM and I can help...
I wont state my email address on here either as bots go around website looking for email addresses as well.



Never ending world Spam............ seriously, who actually ever reads spam emails. Just laugh at the stupid twits sending it and wasting there money :lol:

[matthewt]

Thanks for the responses.

My domain is hosted by a company in the US so I'll check their support forum to see what they suggest.

Basically every email from the domain gets sent to my paradise account.

I might wait a day or so and see if it dies down (yeah right!).

DANB: Thanks for your detailed advice. I don't have a local email server, I could do what you suggest by removing the default redirect for the domain and just setup the 3 or 4 individual ones we actually use.

If things don't improve soon I'll start looking for a filter of some sort.

[Drunken Monkey]

Never ending world Spam............ seriously, who actually ever reads spam emails. Just laugh at the stupid twits sending it and wasting there money :lol:

It's worse than that - they waste OUR money - we are the ones paying for our data connections that they have the cheeky guff to send their unwanted messages down. Not so bad for our home connections, but my business customers get charged by the Meg...

[danb]

Thanks for the responses.

My domain is hosted by a company in the US so I'll check their support forum to see what they suggest.

Basically every email from the domain gets sent to my paradise account.

I might wait a day or so and see if it dies down (yeah right!).

DANB: Thanks for your detailed advice. I don't have a local email server, I could do what you suggest by removing the default redirect for the domain and just setup the 3 or 4 individual ones we actually use.

If things don't improve soon I'll start looking for a filter of some sort.



That you will have to talk to the company that you are doing it with. I dont know the setup that they are using so I cant really say....

[danb]

It's worse than that - they waste OUR money - we are the ones paying for our data connections that they have the cheeky guff to send their unwanted messages down. Not so bad for our home connections, but my business customers get charged by the Meg...


Well ok, that too.

Emails are not that big but when you get shit loads of them (and multiple accounts) it would soon add up...
1000 emails to me is about 1.5 meg or so (If they are only txt emails) If they are "shit" mail with viruses in them well who knows....

[matthewt]

An interesting thing happened yesterday...

I left a message for one of the companies that the spam was advertising saying in a polite but firm manner to stop using my domain for junk spam. I didn't expect a reply or anything to happen.

Got up this morning to a nice reply from them saying they weren't doing the spam and take these things very seriously etc etc. Interesting thing is that a few hours after leaving my message the spam stopped. This morning no spam at all whereas yesterday 20 messages came down.

[danb]

An interesting thing happened yesterday...

I left a message for one of the companies that the spam was advertising saying in a polite but firm manner to stop using my domain for junk spam. I didn't expect a reply or anything to happen.

Got up this morning to a nice reply from them saying they weren't doing the spam and take these things very seriously etc etc. Interesting thing is that a few hours after leaving my message the spam stopped. This morning no spam at all whereas yesterday 20 messages came down.


LOL - Strange things do happen but that’s ridicules.. Good to hear that is cramming down a bit :rolleyes:

[Devil]

Real basic solution:
Create a mail rule that says if its not address to youremail@yourdomain.com then put it in xfolder.

That doesnt stop the spam, but at least it'll sort most of it out!

[danb]

Real basic solution:
Create a mail rule that says if its not address to youremail@yourdomain.com then put it in xfolder.

That doesnt stop the spam, but at least it'll sort most of it out!



Na too complicated and most email servers don’t have that function, I know mine doesn’t...