Spam relay? - GoFuckYourself.com

playa · 08-31-2001, 07:13 AM

anyone here know anything about using your server for spam?

the last few days one of my server jumped from my average of 1meg to 2meg for like 2 hours a day,,this happened like 4 times,,
someone told me that its prolly someone spamming using my server for relay

i found out the ip address
202.241.152.110
it looks like that ip is from japan,,and i know alot of spam comes from there

do anyof ya find the same

this sucks

------------------
------------
Playa
icq#38147712
Got a Black site or category?
Get a Black Dialer!!

www.NoBSdialer.com

asianguy · 08-31-2001, 07:22 AM

you got fucked. Luckily there's only 1 person used yours, If he invites his friends to do it you will lose at least 1gb per hour.

Good luck,

------------------
www.fuck-american.com

playa · 08-31-2001, 07:27 AM

damn,,i hate to set a cap on the server,,,

how can i stop this?
i don't think blocking the ip would be good enough

------------------
------------
Playa
icq#38147712
Got a Black site or category?
Get a Black Dialer!!

www.NoBSdialer.com

asianguy · 08-31-2001, 07:30 AM

Dos attack that IP. if you know his web site url then DOS attack it. In 1 hour will cost him at least 200 Gigs of bandwidth.

------------------
www.fuck-american.com

playa · 08-31-2001, 07:36 AM

the ip resolves to www.PREF.AICHI.JP

They have an english version but not really sure what type of site its like if its an ISP,,not sure if they give free hosting or the spammers are using them for relay,,,

this sucks,,

bunky · 08-31-2001, 10:14 AM

heres whatcha do. www.spam-abuse.net send the IP they will trace it and stop his spam by jamming port 29 which is where smtp is sent. or u can winnuke the ip and shut his shit down for good :-)

bunky · 08-31-2001, 10:15 AM

please correct that http://spam.abuse.net/

mr. mpg · 08-31-2001, 10:23 AM

Playa,
If someone is sending bulk mail from your server you best contact your admin ASAP.
Here is some reading about it........ http://mail-abuse.org/tsi/ar-fix.html

------------------
Webmasters... Need free gallery content?
Tons of quality pics! Now with full FTP!
XXXFreeHosting

playa · 08-31-2001, 10:40 AM

thanks everyone,,i got my host looking into it,,

ztik · 08-31-2001, 11:15 AM

do you use a formmail script? possibly the one by matt right? If you do you need to upgrade to the new version. on the old one even with reffers set its still easy to bypass and spam with it just by typing a url in your browser. also if you have anon ftp setup be sure noone has tagged your pub.

[This message has been edited by ztik (edited 08-31-2001).]

[This message has been edited by ztik (edited 08-31-2001).]

RK · 08-31-2001, 12:29 PM

Quote:

Originally posted by bunky:
jamming port 29 which is where smtp is sent. or u can winnuke the ip and shut his shit down for good :-)

1) This is illegal
2) SMTP runs on port 25.
3) winnuke does not work for many years now.
4) There is a very simple solution, block relaying in sendmail for all IPs besides yours.

------------------
Pay-As-You-Go Hosting FREE Trial!
Below $.90/GB Dedicated Hosting
EnergyHosting - Energizing your business

Kimmykim · 08-31-2001, 12:32 PM

Get with your host -- it's fairly simple to stop open relaying, they should have already taken care of this for you on set up I would think --

One of the biggest complaints the old RBL (still around just quiet now I guess) had was that server admins weren't disallowing open relaying -- couple that with some spam complaints and you could get blackholed in no time back then...

Rocky · 09-05-2001, 01:03 AM

Quote:

Originally posted by asianguy:
you got fucked. Luckily there's only 1 person used yours, If he invites his friends to do it you will lose at least 1gb per hour.

Good luck,

can't you think of a more intelligent way for spamming that stupid BBS

as AWC said:
"Canada is just the attic for the U.S. a place for us to put all the shit we don't need"

and that's where you should go...back in the attic

08-31-2001, 07:13 AM	#1
playa Confirmed User Join Date: Feb 2001 Location: atlanta, GA Posts: 6,432	Spam relay? anyone here know anything about using your server for spam? the last few days one of my server jumped from my average of 1meg to 2meg for like 2 hours a day,,this happened like 4 times,, someone told me that its prolly someone spamming using my server for relay i found out the ip address 202.241.152.110 it looks like that ip is from japan,,and i know alot of spam comes from there do anyof ya find the same this sucks ------------------ ------------ Playa icq#38147712 Got a Black site or category? Get a Black Dialer!! www.NoBSdialer.com

08-31-2001, 07:22 AM	#2
asianguy Registered User Join Date: Aug 2001 Location: Near USA Posts: 10	you got fucked. Luckily there's only 1 person used yours, If he invites his friends to do it you will lose at least 1gb per hour. Good luck, ------------------ www.fuck-american.com

08-31-2001, 07:27 AM	#3
playa Confirmed User Join Date: Feb 2001 Location: atlanta, GA Posts: 6,432	damn,,i hate to set a cap on the server,,, how can i stop this? i don't think blocking the ip would be good enough ------------------ ------------ Playa icq#38147712 Got a Black site or category? Get a Black Dialer!! www.NoBSdialer.com

08-31-2001, 07:30 AM	#4
asianguy Registered User Join Date: Aug 2001 Location: Near USA Posts: 10	Dos attack that IP. if you know his web site url then DOS attack it. In 1 hour will cost him at least 200 Gigs of bandwidth. ------------------ www.fuck-american.com

08-31-2001, 07:36 AM	#5
playa Confirmed User Join Date: Feb 2001 Location: atlanta, GA Posts: 6,432	the ip resolves to www.PREF.AICHI.JP They have an english version but not really sure what type of site its like if its an ISP,,not sure if they give free hosting or the spammers are using them for relay,,, this sucks,,

08-31-2001, 10:14 AM	#6
bunky Confirmed User Join Date: Aug 2001 Location: Charlotte NC USA Posts: 902	heres whatcha do. www.spam-abuse.net send the IP they will trace it and stop his spam by jamming port 29 which is where smtp is sent. or u can winnuke the ip and shut his shit down for good :-)

08-31-2001, 10:15 AM	#7
bunky Confirmed User Join Date: Aug 2001 Location: Charlotte NC USA Posts: 902	please correct that http://spam.abuse.net/

08-31-2001, 10:23 AM	#8
mr. mpg Confirmed User Join Date: Mar 2001 Posts: 140	Playa, If someone is sending bulk mail from your server you best contact your admin ASAP. Here is some reading about it........ http://mail-abuse.org/tsi/ar-fix.html ------------------ Webmasters... Need free gallery content? Tons of quality pics! Now with full FTP! XXXFreeHosting

08-31-2001, 10:40 AM	#9
playa Confirmed User Join Date: Feb 2001 Location: atlanta, GA Posts: 6,432	thanks everyone,,i got my host looking into it,,

08-31-2001, 11:15 AM	#10
ztik Confirmed User Industry Role: Join Date: Aug 2001 Location: Nomad Posts: 5,196	do you use a formmail script? possibly the one by matt right? If you do you need to upgrade to the new version. on the old one even with reffers set its still easy to bypass and spam with it just by typing a url in your browser. also if you have anon ftp setup be sure noone has tagged your pub. [This message has been edited by ztik (edited 08-31-2001).] [This message has been edited by ztik (edited 08-31-2001).]

08-31-2001, 12:32 PM	#12
Kimmykim bitchslapping zebras!!!!! Industry Role: Join Date: Jun 2001 Location: In a shack by the beach Posts: 16,015	Get with your host -- it's fairly simple to stop open relaying, they should have already taken care of this for you on set up I would think -- One of the biggest complaints the old RBL (still around just quiet now I guess) had was that server admins weren't disallowing open relaying -- couple that with some spam complaints and you could get blackholed in no time back then...