Re: [OT] e-mail account hi-jacked?

["Rob Lamb" <rjl@xxxxxxx>]

Chris,

I have one account at RH but it's another I'm having problems with
(at EasySpace). Perhaps I should move it but I only use it for
(free) email at the moment....?

Rob

--- In ukha_d@xxxxxxx, "Chris Bond" <chris@l...> wrote:
> Dont forget this verisign b******ks is causing a lot of spam to
get
> through that it should do.  What a lot of isps do as a first check
> is check the domain exists then if it does accept it, as a lot of
> spammers use fake domain names.
>
> At RH we use SpamAssisgn and the user can enable it in there
control
> panel and get it to move it to a spam box - its 99% effective in
> most cases.  You can add whitelists for example, if someone sends
> you a lot of html emails this is often tagged as spam and you
would
> need to whitelist them.
>
> Kind Regards,
> Chris Bond
>
> --- In ukha_d@xxxxxxx, "Alex Monaghan" <ha@m...>
wrote:
> > Rob,
> >
> > Do a google search on email headers, this will give you the path
> the mail
> > followed, but my guess is that tha mail will originate from a
far
> east
> > insecure mail relay and you'll get no response from your files
> abuse
> > complaint :-(
> >
> > I'm currently at about 600 over the last week or so and it's
only
> just
> > started to tail off :-(
> >
> > Problem is that the mail protocols were developed when we all
> trusted each
> > other so there's nothing to stop these low life *****'s.
> >
> > > -----Original Message-----
> > > From: Rob Lamb [mailto:rjl@xxxxxxx...]
> > > Sent: Tuesday, September 23, 2003 9:16 AM
> > > To: ukha_d@xxxxxxx
> > > Subject: [ukha_d] Re: [OT] e-mail account hi-jacked?
> > >
> > >
> > > Switched my machine on this morning and got 143 NDRs along
with
> the
> > > usual amount of crap. This is driving me nuts and I'm
worried
> about
> > > being blocked because of this.
> > >
> > > How can I find out who's sending these (if it possible at
all)?
> > >
> > > Rob
> > >
> > > --- In ukha_d@xxxxxxx, <mrf@p...> wrote:
> > > > Sorry, I should have been clearer. I meant, it's
someone
> sending a
> > > virus to
> > > > you, not that you HAVE one.
> > > >
> > > > The NDR's seem harmless, but they are usually
accompanied by
a
> > > email
> > > > appearing to be from Microsoft with a patch attached..
the
> > > attachment is of
> > > > course, the virus. I'm not sure what the NDR's are for,
but
> they
> > > are
> > > > definitely due to the virus.
> > > >
> > > > I'm still receiving copies of it now. I know my PC is
clean,
> but
> > > someone
> > > > with my name in their address book has been infected. I
must
> get
> > > about 5
> > > > copies a day ! and I am also getting the NDR's ! They
are
> usually
> > > >
> > > > Cheers
> > > >
> > > > Marc
> > > >
> > > >   -----Original Message-----
> > > >   From: Rob Lamb [mailto:rjl@xxxxxxx...]
> > > >   Sent: 22 September 2003 20:12
> > > >   To: ukha_d@xxxxxxx
> > > >   Subject: [ukha_d] Re: [OT] e-mail account hi-jacked?
> > > >
> > > >
> > > >   Thanks for the advice but no virus found and all
machines
are
> > > >   running up to date anti-virus software. It's a real
PITA
as
> I do
> > > >   sometimes get some genuine ones when I've got an
address
> wrong.
> > > >   Spamnet is coping with it but I still have to check
them
in
> case
> > > >   it's a legitimate one.
> > > >
> > > >   Rob
> > > >
> > > >   --- In ukha_d@xxxxxxx, <mrf@p...> wrote:
> > > >   > It's a virus. W32.Sven or something like that.
You'll
> probably
> > > be
> > > >   getting
> > > >   > microsoft patches too ? Just delete em, and be
sure to
scan
> > > your
> > > >   PC.
> > > >   >
> > > >   >
> > > >   >
> > > >
> > >
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@xxxxxxx.
> > > >   ..
> > > >   >
> > > >   > Cheers
> > > >   >
> > > >   > Marc
> > > >   >   -----Original Message-----
> > > >   >   From: Rob Lamb [mailto:rjl@xxxxxxx...]
> > > >   >   Sent: 22 September 2003 14:09
> > > >   >   To: ukha_d@xxxxxxx
> > > >   >   Subject: [ukha_d] [OT] e-mail account
hi-jacked?
> > > >   >
> > > >   >
> > > >   >   Since the weekend I've been receiving a shed
load
> > > of "undelivered
> > > >   >   mail" automated responses to mail that
I've never sent
> from
> > > >   generic
> > > >   >   but different addresses at one of my domains.
Is this
> > > something
> > > >   to
> > > >   >   be worried about or has someone just jumped on
an
address
> > > >   bandwagon
> > > >   >   and is spoofing the addresses?
> > > >   >
> > > >   >   Has anyone else had this problem?
> > > >   >
> > > >   >   Rob
> > > >   >
> > > >   >
> > > >   >         Yahoo! Groups Sponsor
> > > >   >               ADVERTISEMENT
> > > >   >
> > > >   >
> > > >   >
> > > >   >
> > > >   >   ** UKHA2004 BE THERE! ** - start planning now.
> > > >   >
> > > >   >   http://www.automatedhome.co.uk
> > > >   >   Post message: ukha_d@xxxxxxx
> > > >   >   Subscribe:  ukha_d-subscribe@xxxxxxx
> > > >   >   Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > > >   >   List owner:  ukha_d-owner@xxxxxxx
> > > >   >
> > > >   >   Your use of Yahoo! Groups is subject to the
Yahoo!
Terms
> of
> > > >   Service.
> > > >   >
> > > >   >
> > > >   > [Non-text portions of this message have been
removed]
> > > >
> > > >
> > > >         Yahoo! Groups Sponsor
> > > >               ADVERTISEMENT
> > > >
> > > >
> > > >
> > > >
> > > >   ** UKHA2004 BE THERE! ** - start planning now.
> > > >
> > > >   http://www.automatedhome.co.uk
> > > >   Post message: ukha_d@xxxxxxx
> > > >   Subscribe:  ukha_d-subscribe@xxxxxxx
> > > >   Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > > >   List owner:  ukha_d-owner@xxxxxxx
> > > >
> > > >   Your use of Yahoo! Groups is subject to the Yahoo!
Terms of
> > > Service.
> > > >
> > > >
> > > > [Non-text portions of this message have been removed]
> > >
> > >
> > > ------------------------ Yahoo! Groups Sponsor
> > > ---------------------~--> Buy Remanufactured Ink
Cartridges &
> > > Refill Kits at MyInks.com for: HP $8-20. Epson $3-9, Canon
> > > $5-15, Lexmark $4-17. Free s/h over $50 (US & Canada).
> > http://www.c1tracking.com/l.asp?cid=6351
> > http://us.click.yahoo.com/0zJuRD/6CvGAA/qnsNAA/IBOolB/TM
> > -----------------------------------------------------------------
--
> --~->
> >
> > ** UKHA2004 BE THERE! ** - start planning now.
> >
> > http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx
> > Subscribe:  ukha_d-subscribe@xxxxxxx
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > List owner:  ukha_d-owner@xxxxxxx
> >
> > Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/