Spam Filter ISP Forums : [off topic] How to get out from a spoofer https://www.logsat.com/spamfilter/forums/ Wed, 12 Aug 2026 19:53:40 +0000 Wed, 26 Oct 2005 15:55:30 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5359 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[[off topic] How to get out from a spoofer : Alan, We&#039;ve thought about...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6699&title=off-topic-how-to-get-out-from-a-spoofer#6699 Author: LogSat
Subject: 5359
Posted: 26 October 2005 at 3:55pm

Alan,

We've thought about the LDAD / ActiveDirectory verificationin the past, but thought the same thing that WebGuyz mentioned.

Furthermore, we have users who receive millions of emails/day. That,along with the risk of spammers/hackers who could practically performDoS attacks on your LDAP servers with millions of bogus authenticationrequests, also told us it may not have been a good idea...
]]> Wed, 26 Oct 2005 15:55:30 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6699&title=off-topic-how-to-get-out-from-a-spoofer#6699 <![CDATA[[off topic] How to get out from a spoofer : Why not use LDAP tools and have...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6694&title=off-topic-how-to-get-out-from-a-spoofer#6694 Author: WebGuyz
Subject: 5359
Posted: 26 October 2005 at 1:28am

Why not use LDAP tools and have it create the AuthorizedTo.txt file every 10 to 30 minutes. It runs faster by SF reading it into memory than having ldap queries run for each and every incoming email.]]> Wed, 26 Oct 2005 01:28:39 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6694&title=off-topic-how-to-get-out-from-a-spoofer#6694 <![CDATA[[off topic] How to get out from a spoofer : Roberto, can I submit a request...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6678&title=off-topic-how-to-get-out-from-a-spoofer#6678 Author: Alan
Subject: 5359
Posted: 21 October 2005 at 3:14pm

Roberto, can I submit a request for a LDAP feature?  Seems liekthat woud be a great tool agains all sorts of dictionary spam attacksas well as fallout from spoofers.


]]> Fri, 21 Oct 2005 15:14:46 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6678&title=off-topic-how-to-get-out-from-a-spoofer#6678 <![CDATA[[off topic] How to get out from a spoofer : Alan wrote:Anyone have any...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6656&title=off-topic-how-to-get-out-from-a-spoofer#6656 Author: Marcus
Subject: 5359
Posted: 19 October 2005 at 8:45pm

Originally posted by Alan Alan wrote:


Anyone have any suggestions?

If not, is there at least a way to block the rejection notices that have the orignal email attached with this text in it?

See my first post.

You might want to utilize the "Authorized To Emails" and enter your legit users.  This should stop the NDR back to fake users.  Should cut down on of at least some of it.

]]> Wed, 19 Oct 2005 20:45:47 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6656&title=off-topic-how-to-get-out-from-a-spoofer#6656 <![CDATA[[off topic] How to get out from a spoofer : No this is the spammer spoofing...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6655&title=off-topic-how-to-get-out-from-a-spoofer#6655 Author: Alan
Subject: 5359
Posted: 19 October 2005 at 8:13pm

No this is the spammer spoofing your own domain, sending spam usingyour domain as the From: and Reply-To so you get all the bounces andrejections flooding your servers.

keyword block is not able to block rejection notices that do not include the original email in the body.

Originally posted by Marcus Marcus wrote:

If they have a link to <http://www.dates4funz.com/extra/angelsweet3>
in every one of their emails, a keyword block

(\bdates4funz\.com\b)

will trash every one of them.

]]> Wed, 19 Oct 2005 20:13:43 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6655&title=off-topic-how-to-get-out-from-a-spoofer#6655 <![CDATA[[off topic] How to get out from a spoofer : If they have a link to &lt;htt...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6651&title=off-topic-how-to-get-out-from-a-spoofer#6651 Author: Marcus
Subject: 5359
Posted: 19 October 2005 at 1:46pm

If they have a link to <http://www.dates4funz.com/extra/angelsweet3>
in every one of their emails, a keyword block

(\bdates4funz\.com\b)

will trash every one of them.



Edited by Marcus]]> Wed, 19 Oct 2005 13:46:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6651&title=off-topic-how-to-get-out-from-a-spoofer#6651 <![CDATA[[off topic] How to get out from a spoofer : fight fire with fire, do some...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6649&title=off-topic-how-to-get-out-from-a-spoofer#6649 Author: Marco
Subject: 5359
Posted: 19 October 2005 at 8:08am

fight fire with fire, do some spoofing of your own and have the spoofable domain blacklisted by as many listing sites as possible.

just an idea, don't take me serious :)

regards,

Marco

]]> Wed, 19 Oct 2005 08:08:53 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6649&title=off-topic-how-to-get-out-from-a-spoofer#6649 <![CDATA[[off topic] How to get out from a spoofer : Anyone have any technique or suggestions...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6648&title=off-topic-how-to-get-out-from-a-spoofer#6648 Author: Alan
Subject: 5359
Posted: 18 October 2005 at 8:11pm

Anyone have any technique or suggestions on how to save a domain name from a spoofer? 

I've tried to have the spammer's websites shut down but NameCheap hasno problem hosting the spammer's websites even when presented withmounds of evidence of spoofing someone elses domain as well as allowingobviously faked registration ID info so they have been no help atall.  Oh for the good old days of regulated domain registration.

No way to track the emails due to an obvious zombie network.

Here's and example of one the spammer's websites
<http://www.dates4funz.com/extra/angelsweet3>
Spammer always uses the "angelsweet3"

Anyone have any suggestions?

If not, is there at least a way to block the rejection notices that have the orignal email attached with this text in it?
]]> Tue, 18 Oct 2005 20:11:31 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5359&PID=6648&title=off-topic-how-to-get-out-from-a-spoofer#6648