Has a mail server been hacked again?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Has a mail server been hacked again?
Has a mail server been hacked again?
31-07-2007 4:36 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I realise that these spam emails could be the result of previous hacks (just keeping the '@mydomain.plus.com' consistent but it is rather odd there's been a step change in the spam I am receiving. Is it possible something's been hacked again?
Re: Has a mail server been hacked again?
31-07-2007 4:39 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
There are a few ways to combat this, one is to turn off the catch-all feature and only receive emails to specific addresses. The second way is to turn off any emails sent to @username.plus.com, if you want us to do this then just raise a ticket and we'll sort it for you.
I'd suggest having a read of my blog post, for ways to help with spam.
Re: Has a mail server been hacked again?
31-07-2007 4:44 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Has a mail server been hacked again?
31-07-2007 6:55 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Has a mail server been hacked again?
31-07-2007 9:41 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Enterprise Architect - Network & OSS
Plusnet Technology
Re: Has a mail server been hacked again?
02-08-2007 10:41 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
The worry about this is thta there are domains that I e-mail and am afraid that my address will be blacklisted.
Have the servers been comproised again.
As previous why not impliment authentication for e-mail sending
MArk
Re: Has a mail server been hacked again?
02-08-2007 11:09 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
MARK
Re: Has a mail server been hacked again?
02-08-2007 11:38 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
John
Re: Has a mail server been hacked again?
02-08-2007 11:48 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Your comment 10:02pm, Thursday 2nd August 2007
FYI these have all come in the space of 3 Hours
Your comment 10:47pm, Thursday 2nd August 2007
NOW OVER 700 !!
Your comment 11:24pm, Thursday 2nd August 2007
NOW OVER 1000
CAN SOMEONE LOOK AT THIS !!!!!
Your comment 11:35pm, Thursday 2nd August 2007
NOW OVER 1200..............
and guess what
NO RESPONSE FROM CS YET, only 21/2 hours later and approaching 1300 reciepts
I'm a business customer supposed to be on priority response...
MARK
Re: Has a mail server been hacked again?
02-08-2007 11:52 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: aetos The worry about this is thta there are domains that I e-mail and am afraid that my address will be blacklisted.
Unless the mails are actually being sent by you (worth a full virus scan with a couple of different scanners) then I wouldn'y worry about the blacklist as most blacklists operate on IP address rather than email address because in most cases the email addresses are just innocent parties whose addresses are being used as from addresses by spammers.
Quote from: aetos Have the servers been comproised again.
Not that I know of and I have to say that it's very unlikely. What's most likely here as I say is that a spammer has go hold of your email address and has just set it as a from address. It probably won't last for long generally spammers will move on to a new batch of from addresses after a short while.
Quote from: aetos As previous why not impliment authentication for e-mail sending
Certainly something we are looking at bringing in but ultimately it doesn't stop something like this. SMTP authentication would allow people to send mail via our mail servers from outside our network and might help to cut down on spammers sending via our relay servers if it was made mandatory but wouldn't stop spammers from using our customers' email addresses as from addresses.
Enterprise Architect - Network & OSS
Plusnet Technology
Re: Has a mail server been hacked again?
03-08-2007 12:05 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote Unless the mails are actually being sent by you (worth a full virus scan with a couple of different scanners) then I wouldn'y worry about the blacklist as most blacklists operate on IP address rather than email address because in most cases the email addresses are just innocent parties whose addresses are being used as from addresses by spammers.
my address with PN is 8x.xx.xxx.xx.plus.net and according to the spam tools I looked at earlier PN have
Quote Addresses in plus.com used to send email
Showing 1 - 50 out of 316
taken from senderbase
Question 2
Quote Not that I know of and I have to say that it's very unlikely. What's most likely here as I say is that a spammer has go hold of your email address and has just set it as a from address. It probably won't last for long generally spammers will move on to a new batch of from addresses after a short while.
This is the 4th /5th time this has occured
I posted a ticket regarding this nearly 3 hours ago and no response yet from PN CS (i'm a business customer)
MARK
NOW REACHING NEARLY 1500 mail items !!!
Re: Has a mail server been hacked again?
03-08-2007 12:13 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
http://www.trustedsource.org/TS?do=feedback&subdo=query&q=plus.com
Mark
Re: Has a mail server been hacked again?
03-08-2007 12:26 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Unfortunately when an address has been picked up by a spammer there's a chance it will be used as a from address, I get it about once every 3 or 4 months on one of my domains. Usually lasts about a day or so. If you don't use the catch-all facility on your email address then turning this off will block most of the mail that's coming through.
Enterprise Architect - Network & OSS
Plusnet Technology
Re: Has a mail server been hacked again?
03-08-2007 12:32 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: aetos
NOW REACHING NEARLY 1500 mail items !!!
Until the storm is over .. use a program like Magic Mail Monitor 3 which will enable you to mass delete and sort items in to alphbetical and senders etc Its FREE and can be found here
http://mmm3.sourceforge.net/
It will enable you to see the mail headers and you can delete the mail without having to download the mail to your computer.
Re: Has a mail server been hacked again?
03-08-2007 8:00 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Quote from: dave
Unfortunately when an address has been picked up by a spammer there's a chance it will be used as a from address, I get it about once every 3 or 4 months on one of my domains. Usually lasts about a day or so. If you don't use the catch-all facility on your email address then turning this off will block most of the mail that's coming through.
I've been there - in the old days when I was on dial up. I got about 2500 failure notices... and I didn't have anything like a catch all so I got them all.
I happened again recently but as I have a catch-all on my domain at Just The Name it all got funnelled off as I don't have email addresses like aaaaaa@mydomain
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Has a mail server been hacked again?