Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 Jan 2015 19:08:53 -0600
From:      Adam Vande More <amvandemore@gmail.com>
To:        galtsev@kicp.uchicago.edu
Cc:        Erich Dollansky <erichsfreebsdlist@alogt.com>, FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: ?????Pls remove me I have been hacked!!!
Message-ID:  <CA%2BtpaK2a7C4tQSPcHAziFCfMj2NHH8jP0MefdcEaWLGyL6Ua6w@mail.gmail.com>
In-Reply-To: <20713.128.135.70.2.1420774393.squirrel@cosmo.uchicago.edu>
References:  <20150108231912.C874F48940C@agent02.agent.vmail.yz.sinanode.com> <54AF13F6.5070105@kicp.uchicago.edu> <20150109092132.2f7f131e@X220.alogt.com> <20713.128.135.70.2.1420774393.squirrel@cosmo.uchicago.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jan 8, 2015 at 9:33 PM, Valeri Galtsev <galtsev@kicp.uchicago.edu>
wrote:

>
> On Thu, January 8, 2015 7:21 pm, Erich Dollansky wrote:
> > Hi,
> >
> > On Thu, 08 Jan 2015 17:34:14 -0600
> > Valeri Galtsev <galtsev@kicp.uchicago.edu> wrote:
> >
> >> Is that only me or others noticed too that every first message of new
> >> thread on this list if followed by junk like this. This apparently
> >> was delivered from domain
> >>
> > this is an old thing. It comes and goes.
> >
> >> sina.com.cn
> >>
> >> Would that be reasonable to reject all mail of that origin on the MX
> >> level?
> >>
> > It is not that easy. The sender addresses change very often.
> >
>
> That is what I assumed from the very beginning. With these things on my
> servers I usually do this: I find out which domain sender's MX serves.
> Then I send complaint to
>
> abuse@that.domain.com
>
> No one usually gets back to me (at least from that geoip location no one
> ever did). Then I send similar complaint appended with note that abise@
> never came back to me to postmaster@that.domain.com. After that I set my
> MX to reject mail with message that that domain didn't respond abuse
> complaint. [Did I miss something decent sysadmin should do in the case?]
>

Email is intrinsically open and spoof-able.   Spending time on it further
than marking it spam is almost universally a waste of time.  Get a better
spam filter is the answer.  In other words:

https://craphound.com/spamsolutions.txt

-- 
Adam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BtpaK2a7C4tQSPcHAziFCfMj2NHH8jP0MefdcEaWLGyL6Ua6w>