[vox] spam question

Tony Cratz cratz at hematite.com
Tue Apr 15 13:23:33 PDT 2008


Cylar Z wrote:
> 
> I get an average of 3-4 failed spam attempts each day.
> The overwhelming majority come from China or Korea,
> though I do sometimes see other types of failed
> attacks (mod_proxy, etc) from Europe and other parts
> of the world.

	I run Sendmail instead of postfix (at least for now) because
	I have been using Sendmail for over twenty years.

	What I do is use a couple of black lists to help reduce the
	amount of SPAM I receive they are: Spamhaus, Spamcop,
	cn.countries.nerd.dk which blocks China IPs, japan.blackholes.us
	for Japan, russia.blackholes.us for Russia,
	argentina.blackholes.us For Argentina, hongkong.blackholes.us
	for Hong Kong, mexico.blackholes.us for Mexico,
	singapore.blackholes.us for Singapore and korea.blackholes.us
	for Korea.

	Some of those have very few hits some have a large number of
	hits (Spamhaus, Spamcop and China).

> Sometimes I do a WHOIS on the originating IP address,
> and among other information it returns an email
> address along the lines of "report spam to
> abuse@<hostname>.com."

	I found it to be a waste of time. Which is why I use Spamhaus
	and Spamcop.

> Or do you believe that the ISP's admin is himself
> responsible in many of these cases and that
> complaining would therefore be futile?

	The ISP's can only block the spam which is sent via them. Most
	spammers do not use an ISP mail server to forward through. They
	use their own SMTP server.

	But if you have paid attention to what is going on with the
	bot networks you know they are now the ones sending out the
	SPAMs. And all of those bot servers are due to a couple of
	things. 1) Home users running Microsoft. 2) ISP not blocking
	spam and viruses as they come into their systems for their
	users. 3) Mail clients (Outlook) which will allow .exe and
	Office macro to be executed without scanning for a virus.
	4) IE which does not scan web pages for links to .exe files
	and warn the user they may be screwing up their system by
	downloading this program.

	All of these together has cause our problems with SPAM.
	I run a virus scanner on all E-mail coming into my system not
	so much for my self but because I do have some mail lists
	and I don't want someone coming back to me and saying they
	got a virus from my mail list server.


							Tony


More information about the vox mailing list