iBurst listed by Spambot

M

Methuselah

Well-Known Member
Joined
Apr 13, 2005
Messages
128
Reaction score
0
Location
Centurion, South Africa
Thanks to [email protected] it would appear.
Punting http://www.mycastle.co.za/

Sigh.
I thought prevention of such was the whole reason for forcing us to use iBurst as the SMTP sender ??
Guess it doesn't always work as intended, huh.


The reason for the problem:
4.3.2 - Not accepting messages at this time 554-'mailgate01.mxrc.co.za\nYour connection has been blocked.
Please refer to website http://spam.lookup.bl.isdsl.net for information as to why your connection has been blocked.'



IP Address 196.2.97.2 was found on SPAM.

It was detected at 2007-06-24 14:53:21 (+/- 30 minutes) and last seen at 2007-06-24 14:53:21 (+/- 30 minutes)

You will need to mail dyn [at] bl [dot] isdsl [dot] net for removal due to sending mail to a spam trap.

Last spam mail received from 196.2.97.2:

MIME-Version: 1.0
X-Ironport-Anti-Spam-Result: AgAAAGrTfUbEAmECjGdsb2JhbACCYYsZgSEBAQkGCAcIFgc
X-Ironport-Anti-Spam-Result: AgAAAGrTfUbEHh/Rh2dsb2JhbACCYYsZgSEBAQkOLA
X-Virus-Scanned: ClamAV using ClamSMTP
Content-Type: text/html; charset="windows-1252"
X-Ironport-Anti-Spam-Filtered: true
X-Ironport-Anti-Spam-Filtered: true
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Scan-Signature: 908d8810b47fa7d1f77c8d1b639257c5
Received: by abused.is.co.za (Postfix, from userid 1251) id 2FB573680DC; Sun, 24 Jun 2007 11:22:09 +0200 (SAST)
Received: from phobytor.is.co.za (phobytor.is.co.za [196.4.160.171]) by abused.is.co.za (Postfix) with ESMTP id 2984A368075 for <[email protected]>; Sun, 24 Jun 2007 11:22:09 +0200 (SAST)
Received: from phobytor.is.co.za (localhost [127.0.0.1]) by phobytor.is.co.za (Postfix) with ESMTP id 01C263BC3D5 for <[email protected]>; Sun, 24 Jun 2007 11:22:09 +0200 (SAST)
Received: from mailgate02.mxrc.co.za (mailgate02.mxrc.co.za [196.35.198.132]) by phobytor.is.co.za (Postfix) with ESMTP id C8EDF3BC3D3 for <[email protected]>; Sun, 24 Jun 2007 11:22:08 +0200 (SAST)
Received: from mail-03.jhb.wbs.co.za ([196.2.97.2]) by mailgate02.mxrc.co.za with ESMTP; 24 Jun 2007 11:22:08 +0200
Received: from unknown (HELO mail-05.jhb.wbs.co.za) ([196.30.31.195]) by mail-03.jhb.wbs.co.za with ESMTP; 24 Jun 2007 11:22:08 +0200
Received: from wbs-41-208-218-193.wbs.co.za ([41.208.218.193] helo=PC1) by mail-05.jhb.wbs.co.za with smtp (Exim 4.63) (envelope-from <[email protected]>) id 1I2OKC-0002X5-IX for [email protected]; Sun, 24 Jun 2007 11:24:05 +0200
Delivered-To: [email protected]
Delivered-To: [email protected]
Subject: Have a look at what I found...
Return-Path: <[email protected]>
X-Original-To: [email protected]
X-Original-To: [email protected]
Date: Sun, 24 Jun 2007 11:15:01 +0200
To: <[email protected]>
Content-Transfer-Encoding: quoted-printable
X-Original-Subject: Have a look at what I found...
From: "Christel van Deventer" <[email protected]>
X-RT-Original-Encoding: windows-1252
Content-Length: 1187

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta http-equiv=Content-Type content="text/html; charset=windows-1252">
</head>
<body style="FONT-FAMILY: Tahoma">
<p><font size=2>Hey there,</font></p>
<p><font size=2>I know you are always looking for investment opportunities,
and&nbsp;might think about starting your own business, or extend your current
business.</font></p>
<p><font size=2>Have a look at </font><a
title=blocked::http://www.mycastle.co.za/ href="http://www.mycastle.co.za"><font
size=2>www.mycastle.co.za</font></a></p>
<p><font size=2>If you subscribe&nbsp;their newsletter,&nbsp;you will receive
business and property secrets via email every Tuesday</font></p>
<p><font size=2>The site is dedicated to people like you that would like to save
tax, work on their own and get out of the rat race.</font></p>
<p><font size=2>The site is filled with&nbsp;business&nbsp;advice,&nbsp;legal
documents, calculators, tips and&nbsp; tax loopholes.</font></p>
<p><font size=2>I'm sure it will help you.</font></p>
<p><font size=2></font>&nbsp;</p>
<p><font size=2>Warm Regards</font></p>
<p><font size=2>Christel</font></p>
</body>
</html>
 
This is why I am leaving iBurst...

I have customers jumping all over me because of this **** this morning. I now have to create alternative means of outgoing mail for all my customers.

**** you Iburst
 
How does something like this happen? Ie. If you create a mail server how do you ensure it isn't seen as a spam server.
 
It happens as it did with one of my customers:

They have some useless employees who do no work and sit and surf the internet all day and install every kind of conceivable toolbar known to man. The stupid b1tch infected her PC with a mass-mailer worm that then used the server I installed to mass-mail copies of itself to all the people in her address book. I cleared most of the listings in SBL and sorbs for them a while ago, now iBurst is blacklisted and we're screwed.
 
Fudzy said:
How does something like this happen? Ie. If you create a mail server how do you ensure it isn't seen as a spam server.
Click to expand...

If you configure your mail server as open relay then all the spammers will rub their filthy little hands in glee and pump and dump your poor server full of spam.

There's also alternative methods to "hijack" a mail server for nefarious purposes.

Smart sysadmins always ensure they have more than one static IP in case some luser pumps spam out and manages to get the current static IP blacklisted.

As for iBurst - get a clue... you're inconveniencing most of your customers.
 
Smart sysadmins always ensure they have more than one static IP
Click to expand...
Unfortunately my customer is not willing to pay for another IP. And no, the server is not an open relay. I am not that stupid.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X