Relay for spam?
Tony Pursell
ajp at princeswalk.fsnet.co.uk
Wed May 18 19:42:09 UTC 2011
On Wed, 2011-05-18 at 15:31 -0400, Bill Stanley wrote:
> <<< snip >>>
>
> > Who is your ISP? Do they supply you with a fixed IP address or a dynamic
> > one?
> >
> > Are they basing this just on your email address being used for spam? Or
> > is it you IP address? This is important because email addresses can be
> > spoofed, so almost anyone can send an email 'From' you. If you use
> > Evolution, go into Edit> Preferences> select your default account>
> > Edit, then put ajp at princeswalk.fsnet.co.uk in the Email address box and
> > you will be sending all your mail 'From' me. Its as easy as that! I
> > know because I have one of the most comprehensively spoofed email
> > addresses around, if the non-delivery notices I've been getting lately
> > from various Russian email servers is anything to go on.
> >
> > I don't believe that your ISP would not be so naive as to think your
> > email address alone indicates you as the spam source, so if the email
> > from your ISP is not a hoax, then they must be identifying the spam from
> > the IP address they have given you. So you either have an open proxy or
> > a SMTP mail sever (which sends mail) set up as an open relay.
> >
> > A proxy server usually is set up so that people on the internal IP
> > addresses of a network can access the internet. An open proxy allows
> > anyone on the world wide web who happens to know your IP address to use
> > that proxy server. (I talk from bitter experience!) Unfortunately, they
> > don't just use it to browse the web (although it would be a way to
> > access illegal pornographic content) but use various http commands to
> > relay mail.
> >
> > By default, SMTP mail servers should not be set up to relay mail. So
> > the mail server I administered only sent out mail originating from our
> > internal IP addresses and not 'relay' mail from other external IP
> > addresses. But SMTP mail servers are very easy to set up. Most Windows
> > viruses that send spam have there own built in SMTP mail servers. Even
> > OpenOffice.org/LibreOffice has a built-in SMTP server to send its
> > mail-merge emails.
> >
> > You can go to a site like SORBS (http://www.au.sorbs.net/lookup.shtml)
> > to check if your IP address has been identified as an open proxy or an
> > open relay. Sites like Spamcop collect spam emails from people to
> > identify IP addresses sending spam and inform ISPs of them. They also
> > have a black-list lookup at http://www.spamcop.net/bl.shtml.
> >
> > So have a word with your ISP and ask them on what basis are the saying
> > you are a spammer. They should know if you are an open proxy or open
> > relay. Let us know what they say so we can help you further.
> >
>
> I did check with my ISP and they checked the emails sent from my email
> account and they said they found nothing was unusual. It obviously was
> a hoax and the attachment, that I never saw was probably deleted by the
> ISP, was probably booby trapped hoping that I opened the attachment and
> this computer was a Windoze machine.
>
> To answer your questions...
> 1 I use Wowway as my ISP.
> 2. I do not have a fixed IP number (The ISP probably uses NAT.
> 3. I have a couple email addresses associated with this ISP accounts
> The email address I use for personal emails is not affected so I
> suspect someone is spoofing the email address that I use on this
> forum.
> 3. The email client I use is Thunderbird.
>
>
> Bill Stanley
>
Problem solved, then. Great!
Tony
More information about the ubuntu-users
mailing list