[GRLUG] Email overload

[Don Wood]

There are alot more bots now and once they cull your and everyone else's
address book on your network it's all over but the crying. I had a
rootkit mailbot on a windows machine here a couple months ago and a
faulty firewall rule that wasn't blocking outgoing smtp traffic except
from our email server. The amount of connections was pretty amazing and
I still get rejection mail from time to time. 

-  
Don Wood
IT Admin
Standale Lumber
616.340.2383 mobile
616.530.1145 desk


On Wed, 2008-04-30 at 15:48 -0400, Casey DuBois wrote:

> On Wed, Apr 30, 2008 at 3:45 PM, Ben Rousch <brousch at gmail.com> wrote:
> > On Wed, Apr 30, 2008 at 3:37 PM, Collin <adderd at kkmfg.com> wrote:
> >
> >
> > > This is sort of off topic but sort of on topic...
> > >
> > > I'm getting hundreds upon hundreds of bounce messages from all over the
> > > world today. Someone used our email domain as the sender address for not
> > > so nice emails (they didn't use our server they just claim to be us).
> > > Normally it isn't bad but today is terrible. Anyone else getting this?
> > > If it's on going what's the best course of action? ignore it? Use a mail
> > > filter to trashcan it (though legit bounce messages would be lost too)?
> > >
> > > I've tried sending this message to the list many times. My other posts
> > > show up but nothing on this topic... Maybe it was previously that I put
> > > in the word for fake canned meat or put in an example email address...
> > > Whatever is doing it ITS ANNOYING.
> > > _______________________________________________
> > > grlug mailing list
> > > grlug at grlug.org
> > > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
> >
> > I don't really have an answer for you, but I noticed that our incoming spam
> > jumped up 100% in the last 2 days. It is up 1000% since the beginning of the
> > year. I was hoping the flood would abate, but it seems to only be getting
> > worse.
> >
> >
> > _______________________________________________
> > grlug mailing list
> > grlug at grlug.org
> > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
> >
> 
> I have also noticed a huge jump in the spam I receive from someone
> using my e-mail and have been concerned about it.
> My techs say not to worry but Collin's post makes me wonder if there
> is something we may be missing.
> 
> Casey
> _______________________________________________
> grlug mailing list
> grlug at grlug.org
> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shinobu.grlug.org/pipermail/grlug/attachments/20080430/3aa5b526/attachment-0001.htm