<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.1">
</HEAD>
<BODY>
There are alot more bots now and once they cull your and everyone else's address book on your network it's all over but the crying. I had a rootkit mailbot on a windows machine here a couple months ago and a faulty firewall rule that wasn't blocking outgoing smtp traffic except from our email server. The amount of connections was pretty amazing and I still get rejection mail from time to time. <BR>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>
-
Don Wood
IT Admin
Standale Lumber
616.340.2383 mobile
616.530.1145 desk
</PRE>
</TD>
</TR>
</TABLE>
<BR>
<BR>
On Wed, 2008-04-30 at 15:48 -0400, Casey DuBois wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">On Wed, Apr 30, 2008 at 3:45 PM, Ben Rousch <<A HREF="mailto:brousch@gmail.com">brousch@gmail.com</A>> wrote:</FONT>
<FONT COLOR="#000000">> On Wed, Apr 30, 2008 at 3:37 PM, Collin <<A HREF="mailto:adderd@kkmfg.com">adderd@kkmfg.com</A>> wrote:</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> > This is sort of off topic but sort of on topic...</FONT>
<FONT COLOR="#000000">> ></FONT>
<FONT COLOR="#000000">> > I'm getting hundreds upon hundreds of bounce messages from all over the</FONT>
<FONT COLOR="#000000">> > world today. Someone used our email domain as the sender address for not</FONT>
<FONT COLOR="#000000">> > so nice emails (they didn't use our server they just claim to be us).</FONT>
<FONT COLOR="#000000">> > Normally it isn't bad but today is terrible. Anyone else getting this?</FONT>
<FONT COLOR="#000000">> > If it's on going what's the best course of action? ignore it? Use a mail</FONT>
<FONT COLOR="#000000">> > filter to trashcan it (though legit bounce messages would be lost too)?</FONT>
<FONT COLOR="#000000">> ></FONT>
<FONT COLOR="#000000">> > I've tried sending this message to the list many times. My other posts</FONT>
<FONT COLOR="#000000">> > show up but nothing on this topic... Maybe it was previously that I put</FONT>
<FONT COLOR="#000000">> > in the word for fake canned meat or put in an example email address...</FONT>
<FONT COLOR="#000000">> > Whatever is doing it ITS ANNOYING.</FONT>
<FONT COLOR="#000000">> > _______________________________________________</FONT>
<FONT COLOR="#000000">> > grlug mailing list</FONT>
<FONT COLOR="#000000">> > <A HREF="mailto:grlug@grlug.org">grlug@grlug.org</A></FONT>
<FONT COLOR="#000000">> > <A HREF="http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug">http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug</A></FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> I don't really have an answer for you, but I noticed that our incoming spam</FONT>
<FONT COLOR="#000000">> jumped up 100% in the last 2 days. It is up 1000% since the beginning of the</FONT>
<FONT COLOR="#000000">> year. I was hoping the flood would abate, but it seems to only be getting</FONT>
<FONT COLOR="#000000">> worse.</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> _______________________________________________</FONT>
<FONT COLOR="#000000">> grlug mailing list</FONT>
<FONT COLOR="#000000">> <A HREF="mailto:grlug@grlug.org">grlug@grlug.org</A></FONT>
<FONT COLOR="#000000">> <A HREF="http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug">http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug</A></FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">I have also noticed a huge jump in the spam I receive from someone</FONT>
<FONT COLOR="#000000">using my e-mail and have been concerned about it.</FONT>
<FONT COLOR="#000000">My techs say not to worry but Collin's post makes me wonder if there</FONT>
<FONT COLOR="#000000">is something we may be missing.</FONT>
<FONT COLOR="#000000">Casey</FONT>
<FONT COLOR="#000000">_______________________________________________</FONT>
<FONT COLOR="#000000">grlug mailing list</FONT>
<FONT COLOR="#000000"><A HREF="mailto:grlug@grlug.org">grlug@grlug.org</A></FONT>
<FONT COLOR="#000000"><A HREF="http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug">http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug</A></FONT>
</PRE>
</BLOCKQUOTE>
</BODY>
</HTML>