nanog mailing list archives

Re: Recovering from spam resulting from compromised account


From: Suresh Ramasubramanian <ops.lists () gmail com>
Date: Thu, 22 Nov 2012 08:12:07 +0530

Wait it out as in - you had better examine your mail queues and purge them
of any of the spam that was sent and is still queued up.

It'll still take a day or two after that's done for the blocks to subside.


On Thu, Nov 22, 2012 at 7:59 AM, Dave Sotnick <sotnickd-nanog () ddv com>wrote:

Thanks Matthew. Sadly, most of the bounce responses have URLs that
point you to a help page that doesn't have further contact information
or just tells you to wait it out.

e.g.

http://postmaster.yahoo.com/421-ts03.html
http://www.google.com/mail/help/bulk_mail.html

I'll do the requisite digging and start contacting postmasters.

-Dave

On Wed, Nov 21, 2012 at 6:13 PM, Matthew Barr
<mbarr () snap-interactive com> wrote:

On Nov 21, 2012, at 8:53 PM, Dave Sotnick <sotnickd-nanog () ddv com>
wrote:
Also had reports that we're still seeing bounces to Gmail, Comcast and
Yahoo accounts.


The best thing to do is to go ahead and look at the bounce messages from
the various ISP's, and see if they have any instructions or URL's to
contact.

If you don't have any of those messages at hand, you can see the bounce
codes in the logs of your mailserver.

If you don't have any useful messages in the bounce code, then you can
probably look at the site for each ISP, and google their postmaster group.

Matthew


Matthew Barr
Technical Architect
Snap Interactive
mbarr () mbarr net




-- 
Suresh Ramasubramanian (ops.lists () gmail com)


Current thread: