Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Has a mail server been hacked again?
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Has a mail server been hacked again?
- « Previous
-
- 1
- 2
- Next »
Re: Has a mail server been hacked again?
03-08-2007 9:05 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
From midnight to now I have recieved a further 2117 mails, great going, over 3500 in under 24 hours !!
MArk
MArk
Message 16 of 22
(831 Views)
Re: Has a mail server been hacked again?
03-08-2007 10:04 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I'm not sure what you expect Plusnet to do. The only possible action I can think of would be to block all emails to your domain.
jelv (a.k.a Spoon Whittler) Why I have left Plusnet (warning: long post!) Broadband: Andrews & Arnold Home::1 (FTTC 80/20) Line rental: Pulse 8 Home Line Rental (£14.40/month) Mobile: iD mobile (£4/month) |
Message 17 of 22
(831 Views)
Re: Has a mail server been hacked again?
03-08-2007 10:06 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
...which we can quite easily do now, if you wish. Bear in mind you can still register a free .uk domain, use this to collect your mail and turn off all email to your username.plus.com account.
Hope this helps,
Hope this helps,
Message 18 of 22
(831 Views)
Re: Has a mail server been hacked again?
03-08-2007 12:19 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I had exactly the same thing happen to me some months ago, from one of my domain names not hosted by PlusNet.
It had never received spam before, then all of a sudden it started getting a barrage of delivery failure reports. Didn't get actual spam though - just the failures.
Started getting about 250 in the space of an hour, I was using just a single mailbox with a catch-all (well it wasn't a problem before), so to get round it I moved the <usedalias>@domain.com into a separate mailbox, and put the catch-all <everythingelse>@domain.com into a different one which I'd check occasionally and trash.
I think they just determine whether a domain is active (or in your case username) and start using that. Not at all difficult to do on the internet.
They do seem to move onto other domains though, this one went from about 250 per hour at the peak, and checking now it's only received 48 in the past 2-3 weeks.
I would recommend turning off catch-all and only having specific mailboxes for the aliases you use. This of course doesn't help much if the spam is going to those aliases as well, but often that is not the case.
It had never received spam before, then all of a sudden it started getting a barrage of delivery failure reports. Didn't get actual spam though - just the failures.
Started getting about 250 in the space of an hour, I was using just a single mailbox with a catch-all (well it wasn't a problem before), so to get round it I moved the <usedalias>@domain.com into a separate mailbox, and put the catch-all <everythingelse>@domain.com into a different one which I'd check occasionally and trash.
I think they just determine whether a domain is active (or in your case username) and start using that. Not at all difficult to do on the internet.
They do seem to move onto other domains though, this one went from about 250 per hour at the peak, and checking now it's only received 48 in the past 2-3 weeks.
I would recommend turning off catch-all and only having specific mailboxes for the aliases you use. This of course doesn't help much if the spam is going to those aliases as well, but often that is not the case.
Message 19 of 22
(831 Views)
Re: Has a mail server been hacked again?
03-08-2007 7:36 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hesitantly I have turned the catch all off after 5000+ spam, I had been in the habit of using idtag@username.plus.com
This allowed me to see if anyone was distributing my e-mail address eg: sitename@username.plus.com
This often produced good results and let me track who was selling on mailing lists etc.
I know that SMTP authentication slows e-mail down but I think it would be worth while implementing. I use it on my own server with a good degree of sucess
MARK
This allowed me to see if anyone was distributing my e-mail address eg: sitename@username.plus.com
This often produced good results and let me track who was selling on mailing lists etc.
I know that SMTP authentication slows e-mail down but I think it would be worth while implementing. I use it on my own server with a good degree of sucess
MARK
Message 20 of 22
(831 Views)
Re: Has a mail server been hacked again?
03-08-2007 9:52 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
And how would turning SMTP Authentication on at plusnet do anything? You are getting perfectly valid bounces. The fact is that the spammer has used your domain as the return address and that is why you are getting all the bounces.
Message 21 of 22
(831 Views)
Re: Has a mail server been hacked again?
03-08-2007 10:16 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: aetos Hesitantly I have turned the catch all off after 5000+ spam, I had been in the habit of using idtag@username.plus.com
This allowed me to see if anyone was distributing my e-mail address eg: sitename@username.plus.com
This often produced good results and let me track who was selling on mailing lists etc.
MARK
Hi,
You can still do this with the catch all off, by creating aliases for each site. It takes a little longer, but you can easily bin an alias if you start getting spam to it.
Message 22 of 22
(831 Views)
- « Previous
-
- 1
- 2
- Next »
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Has a mail server been hacked again?