Ming the Mechanic:
Forwarding and spam

The NewsLog of Flemming Funch
 Forwarding and spam2007-06-20 23:59
23 comments
by Flemming Funch

The ISP that hosts one of my two dedicated servers sent me a message today. The abuse department. Essentially the message is that they have too many complaints about people receiving spam from my server and they're going to block it.

They had written a couple of weeks ago too. After I asked them very nicely they sent back a sample of a message they had gotten a complaint about. Essentially it was just one of the mail users on my server that has his mail forwarded to his yahoo account. So, vicepresident@a-non-profit-organization.org is forwarded to somebody@yahoo.com. And the thing is that spam is forwarded too, and sometimes he hits the spam button.

But Yahoo is apparently so incompetent in treating this that they don't notice that the spam didn't come from my server at all. That particular spam came from somebody in Brazil, and that was clearly visible in the headers of the message. As was the fact that the message was forwarded and from what account. But they still turn around and send an abuse message to my ISP, stating that they've received spam from my server. And when my ISP has gotten a certain number of those, they shut me down.

What on earth am I supposed to do about that? Forbid that anybody forwards their mail?

That server has quite a few mail accounts, mostly for non-profit groups that have a website on the server. And most of those mail addresses forward to where people really pick up their mail. There's also a lot of mailing lists on the server, but I suppose that's not the issue here.

What I did today was that I set up Spamassassin to process the incoming mail. So, anything that's likely to be spam gets marked with "***SPAM***" in the subject line, plus a whole bunch of mail headers are added to the message, explaining why it looks like spam.

I wonder if that will make a difference to Yahoo. Otherwise I'll have to figure out how to trash anything that looks like spam which otherwise would be forwarded to Yahoo, and that's a much harder configuration job.



[< Back] [Ming the Mechanic]

Category:  

23 comments

25 Jun 2007 @ 19:23 by Josh Gentry @216.184.15.9 : Forwarding mail will eventuall cease
I work for an ISP, and this is a significant problem. We have had to do contortions where any mail that comes to an account on our server that is then forwarded to AOL or Comcast gets re-routed through a special mail server. 2 reasons for that. One is that if AOL or Comcast blocks a server because of forwarded SPAM, it affects only our accounts that are forwarding their mail to AOL and Comcast. The rest of our customers can still send email to AOL and Comcast. Secondly, it can have its own SpamAssassin setup that can be tuned to address the specific problem.

I believe that forwarding mail from one account to another will become untenable because of this issue.  



26 Jun 2007 @ 00:32 by ming : Forwarding mail
Thank you for that insight, even though it isn't good news. I suppose I might have to do that too, route that mail through a different server, or trash anything that looks like spam altogether. But I'm not having much fun with mail server configuration, so it is a lot of hassle for a few dozen accounts.  


1 Aug 2007 @ 15:56 by JimBob @76.172.50.181 : Forwarding spam
It seems to me there's a problem with forwarding spam, at least from AOL, if something I've been told is true. I.E, that when you open spam, the spammers KNOWS you've opened it and that makes you at least a "warm" target if not a "hot" one, meaning they'll keep hitting you. With AOL (including AOL.COM) when you forward, it opens the spam in order to forward. So, the more I send PayPal spoofs to PayPal (obviously, I'm not someone they want to target) the more they lard me up with spam emails. So, the question I'm obviously asking: is there a way around this? I really want to f these spammers up if possible, but not at the cost of receiving ten times more spam. Thanks.  


13 Aug 2007 @ 20:44 by rayon : Same maybe with
 


20 Jul 2008 @ 10:53 by Peter Valdemar Mørch @90.52.83.70 : I now kinda understand Yahoo!s point
I am having the same problem.

"That particular spam came from somebody in Brazil, and that was clearly visible in the headers of the message. As was the fact that the message was forwarded and from what account."

Yes, it was my first thought too, that that they clearly should be able to distinguish clearly between mail originating from me, and mail originating from Brazil. Look at the damn headers!!!

BUT, if Yahoo were to ignore where the mails *actually* came from (me) and look to the headers as to where the headers say they came from instead (Brazil) and base the reputation of the mail on that header-based origin, I bet the spammers quickly would create false headers and say that all spam originated from some reputable source (e.g. ming.tv ! :-D). The problem is that such headers are not trustworthy when the come from an untrusted source. The only thing Yahoo! can rely on is that the mails *actually* came from *me*!

And so in retrospect, I think that Yahoo!s point is valid. I'm sending them spam, and therefore I shouldn't be trusted as a mail source.

As an administrator of mail on a domain, I do think it is my responsibility to ensure that I don't pass spam along, even if I received it.  



21 Jul 2008 @ 13:31 by ming : Spam
You got a point there. Yahoo can be sure where they got the mail from, as my mail server was talking with theirs, and they know its IP. But, yes, as to the previous history they of course can't really trust whatever headers I pass on. A spammer will often fake those.

So, hm, is the conclusion that one just better not forward anything, unless one stops most spam before one forwards? I suppose. It just still gives me a problem on what to do with the forwarding accounts I have on my server. I suppose I could configure my spam filter to throw away spam before forwarding, although that might be complicated. For normal mail that arrives in people's mailboxes, I prefer that they make that decision themselves, rather than the server, which isn't perfect.  



23 Jan 2011 @ 13:32 by MikeW @212.209.45.98 : Alerting spammers
"the spammers KNOWS you've opened it " - only if you display any linked images. If you just open it as plain text (or if your email reader is smart enough to block any outgoing links) you will not alter the spammer.  


11 Mar 2016 @ 20:08 by Dieter @24.37.71.158 : Yahoo
A lot of possibilities with Internet.  


15 Jul 2016 @ 22:52 by Ebony @188.143.232.32 : owjjyTjIEtjXCCbP
http://www.heliplanex.com/  


20 Jul 2016 @ 21:54 by Jahlin @188.143.232.32 : lwgRUCvkkIElc
http://www.rates.liquorisquicker.net/  


5 Sep 2016 @ 09:29 by xender for pc @117.207.102.53 : xc
xender for pc app  


30 Sep 2016 @ 17:19 by jack sparr @43.224.128.93 : nice
Download Zapya for PC to share files and folders easily from PC to Mobile  


9 Oct 2016 @ 22:00 by Justus @188.143.232.32 : mxyjrPcCUja
http://sitebuzz.tech/bypeople.com  


12 Oct 2016 @ 18:17 by Jayne @188.143.232.32 : FiIRTUNpPnkKeqjUx
http://autoversicherung.tech/übersicht-kfz-versicherungen-deutschland.html  


24 Oct 2016 @ 06:26 by Laneta @188.143.232.32 : EWAdhQxCaLnRsFtc
http://kreditgratisvergleichen.top/kredit-ohne-schufa-telefonisch.html http://kreditgratisvergleichen.top/haspa-studentenkredit-erfahrungen.html  


1 Nov 2016 @ 16:52 by raksasapoker @42.115.2.44 : agen poker
The pressure for war is mounting. The people are opposed to it, but the Administration seems hell-bent on its way to war. Most of the Jewish interests in the country are behind war.I shall
praturan
http://raksasapoker.com/app/img/peraturan.html
jadwal
http://raksasapoker.com/app/img/jadwal.html
promo
http://raksasapoker.com/app/img/promo.html
panduan
http://raksasapoker.com/app/img/panduan.html
main
http://raksasapoker.com/  



15 Nov 2016 @ 20:41 by Jeslyn @188.143.232.32 : MSPBdwDdsm
http://autoversicherungvergleich.pro/check24-autoversicherung-kündigung.html http://autoversicherungen.tech/kfz-versicherung-mit-rabattschutz-vergleich.html http://kreditevergleichen.pw/darlehensvertrag-muster-schweiz-kostenlos.html http://autoversicherungvergleich.pro/autoversicherung-rechner-deutschland.html  


25 Nov 2016 @ 08:57 by SejarahQQ @116.212.141.50 : SejarahQQ.com Agen DominoQQ Online
show your skills here  


28 Nov 2016 @ 03:48 by flip diving @103.238.68.81 : nice
I really wanted to send a small word to say thanks to you for the fantastic points you are writing on this site.  


29 Nov 2016 @ 10:11 by Maryellen @188.143.232.32 : sZovhwTDDpXFWnWZf
http://onlineschoolschoice.info/  


15 Dec 2016 @ 09:06 by Govind Nath @122.173.54.51 : Happy New Year
Merry Christmas and New Year 2017 Animated Images Merry Christmas and New Year 2017 Quotes in Italian
Merry Christmas and New Year 2017 Wishes in Hebrew Merry Christmas and New Year 2017 Images in Hebrew Merry Christmas Quotes in Hebrew Happy New Year 2018 Happy New Year 2018 Images Happy New Year 2018 Wallpapers Happy New Year 2018 Wishes Happy New Year 2018 Quotes New Year 2018 Happy New Year 2018 Happy New Year 2018 Images Happy New Year 2018 Wallpapers Happy New Year 2018 Wishes Happy New Year 2018 Quotes Happy New Year 2018 Photos Happy New Year 2019 Happy New Year 2019 Images Happy New Year 2019 Wallpapers Happy New Year 2017 Wishes Sayings In French New Year 2017 Funny Jokes In Japanese New Year 2017 Animated Greeting Images In Hebrew New Year 2017 Whatsapp DP Status Messages Quotes SMS In Hebrew New Year 2017 Wallpaper Free Download Happy New Year 2017 Whatsapp DP Merry Christmas Gif ImagesMerry Christmas and A Happy New Year 2017 Wishes in Italian Merry Christmas and A Merry Christmas 2016 HD Pictures Merry Christmas 2016 Gif images Merry Christmas 2016 Funny Images Merry Christmas and a 2017 Happy New Year Images Merry Xmas Latest HD Funny Pictures Merry Xmas Latest HD Funny Images Merry Christmas Animated Pic with Gifts Merry Christmas Animated Images Merry Christmas Animated Gif Merry Christmas and A Happy New Year 2017 Wishes in Hebrew Merry Christmas and A Happy New Year 2017 Images in Hebrew Happy New Year 2017 Images in Italian New Year HD Wallpapers 2017
Happy New year 2019 Wishes Happy New year 2019 Happy New year 2018 Images Happy New year 2018 Happy New year 2018 MessagesHappy New Year 2017Greetings in Hebrew
Happy New Year 2017 AnimatedGreetings in Hebrew Happy New Year2017 Messages in Italian
Happy New Year 2017 AustraliaFlag Happy New Year Australia FlagHappy New Year 2017 AustraliaImagesHappy New Year England Flag
New Year 2017Wishes in ItalianMerryChristmas Whatsapp DP MessagesMerry Christmas and New Year 2017 Quotes in Italian
Merry Christmas and New Year 2017 Wishes in Italian
Merry Christmas and New Year 2017 Animated Images
Merry Christmas and New Year 2017 Quotes in ItalianMerry Christmas and New Year 2017 Wishes in HebrewMerry Christmas and New Year 2017 Images in HebrewMerry Christmas Quotes in HebrewYear 2018 CalenderYear 2018 Calender PSDYear 2018 Calender Template
Year 2018 Calender Template indxYear 2018 Calender Template Free Download  



23 Dec 2016 @ 02:57 by Kindsey @188.143.232.32 : yZQfoOhMQuSGu
http://www.kreditanbietertest.info/kreditvertrag-zwischen-privatpersonen-muster.html http://www.kreditanbietertest.info/ratenkredit-vergleich-online-partnerbörsen.html  


16 Jan 2017 @ 11:55 by Darence @188.143.232.32 : qTzoRsAcNXoHucfOwpP
http://carinsuranceratescto.info/TN/Seymour/cheap-auto-insurance/ http://autoinsurancersr.top/TN/Ooltewah/low-income-auto-insurance/ http://cheapcarinsurancefc.top/CA/Hacienda-Heights/non-owners-auto-insurance-quotes/  


Your Name:
Your URL: (or email)
Subject:       
Comment:
For verification, please type the word you see on the left:


Other stories in
2012-05-03 00:04: An evolving path
2012-01-02 13:52: 2011 Accomplishments and 2012 Aims
2011-11-17 02:20: Your inner piece
2011-02-01 00:05: Slow Mo Flow
2011-01-22 18:40: Recognition
2010-08-23 00:36: Where's Ming?
2010-07-20 14:24: Getting other people to do stuff
2010-06-22 00:27: Inventory
2010-06-19 23:10: Conversations
2009-10-28 12:31: Then a miracle occurs



[< Back] [Ming the Mechanic] [PermaLink]? 


Link to this article as: http://ming.tv/flemming2.php/__show_article/_a000010-001864.htm
Main Page: ming.tv