| Author |
Message |
|
Mike=GCHQ=
|
Post subject: spam , outlook express, work server  Posted: Tue Oct 02, 2007 11:51 pm |
|
 |
| Legal Pidgeon |
 |
Joined: Sat Apr 17, 2004 11:47 am
Posts: 7844
Location: Manchester
|
my brother asked me this thought i'd run it by u guys
ms outlook express 2002 being ran by his work's firm...
they're getting lots of spam with random pre-fixes to their work's domain
like
xyzabc@solicitors.com
so.... how do they fix it ?
they can't filter the domain altogether as obviously they need to receive their internal e-mails _________________ ---------------------------------------- 
|
|
  |
|
 |
|
Caspius=GCHQ=
|
Post subject: Posted: Wed Oct 03, 2007 12:22 am |
|
|
| The Groundkeeper |
 |
Joined: Fri Mar 26, 2004 7:59 pm
Posts: 6056
Location: UK
|
|
Really more information needed.
Is it a local server, remote, how many users are there, is it an exchange server etc.
_________________ 
|
|
| |
|
|
|
happyslappy
|
Post subject: easy Posted: Wed Oct 03, 2007 10:29 am |
|
|
| that was a stupid comment btw |
 |
Joined: Wed Mar 03, 2004 12:40 pm
Posts: 109345
Location: manchester
|
grey listing - bounce the mails and see if they come back will get rid of loads as most spam comes from hacked machines / bots and they dont run a pop/imap server 
also get some kinda software like spam assasin and that should flag it as spam in the mail headers and you can blackhole it on the server or in the mail client
soz for image size - new install and nout to resize it yet
 _________________ 
|
|
| |
|
|
|
Arma
|
Post subject: Posted: Wed Oct 03, 2007 11:32 am |
|
|
| PFY wannabe |
 |
Joined: Sun Jan 02, 2005 11:51 pm
Posts: 3295
Location: South, but not far south enough :/
|
|
When I was a sys admin we managed to configure out exim mail server to have a catchall that went to /dev/null which stopped all the random crap filling up the server.
_________________ 
"I wish my lawn was emo, so it would cut itself...."
|
|
| |
|
|
|
GeneralPublic=GCHQ=
|
Post subject: Posted: Wed Oct 03, 2007 1:46 pm |
|
|
| Saints ftw!! |
 |
Joined: Fri Apr 23, 2004 6:22 pm
Posts: 7877
Location: /dev/null
|
what server is it - you can choose what do do with the undeliverable email in Exchange.
I've just installed a few of these which are pretty nifty 
_________________
Insert unfunny comment here ->
|
|
| |
|
|
|
Mike=GCHQ=
|
Post subject: Re: easy Posted: Thu Oct 04, 2007 7:49 pm |
|
|
| Legal Pidgeon |
|
Joined: Sat Apr 17, 2004 11:47 am
Posts: 7844
Location: Manchester
|
happyslappy wrote: grey listing - bounce the mails and see if they come back will get rid of loads as most spam comes from hacked machines / bots and they dont run a pop/imap server What do you mean exactly? How do you "bounce the mails" ? _________________ ----------------------------------------
|
|
| |
|
|
|
GeneralPublic=GCHQ=
|
Post subject: Posted: Thu Oct 04, 2007 7:55 pm |
|
|
| Saints ftw!! |
|
Joined: Fri Apr 23, 2004 6:22 pm
Posts: 7877
Location: /dev/null
|
you need to find what email server they have
_________________
Insert unfunny comment here ->
|
|
| |
|
|
|
happyslappy
|
Post subject: server Posted: Fri Oct 05, 2007 9:58 am |
|
|
| that was a stupid comment btw |
|
Joined: Wed Mar 03, 2004 12:40 pm
Posts: 109345
Location: manchester
|
Quote: What do you mean exactly? How do you "bounce the mails" ?
our mail servers bounce the mail when it first comes in so there mail server resends it , a hacked server/ spam bot wont do that you see
also make sure reverse lookup on the domain of origin match the email
then you have a hole load of regular expression matching you can do
looking for hardon pills / morgages etc etc _________________
|
|
| |
|
|
|
