Aehso’s Output

Spam, not from me.

Recently the volume of spam email hitting my (hosted) SMTP server has started to become a real nuisance. Incoming spam of the “buy viagra”, “amazing stock opportunity” and “exiled prince of ” variety are old school, and my hosting service’s SpamAsassin gateway flags a lot of that on the way in. That’s a good start, although I have no inclination to go through 500 of these a day looking for false negatives so I’d almost prefer if they were just deleted on receipt - if you’re listening Justin!

What is really starting to bug me are the 1000s of mailer daemon responses I’m getting every day from other SMTP servers for emails that were never sent through my relay. My hosting service uses rock solid BSDUnix so it’s safe as houses and isn’t being used to send these emails in the first place. It would appear that my domain seems to have made it onto some spambot’s “acceptable from” domain list and they are using it with impunity to try get through other spam filters, no doubt via compromised Windows hosts on broadband connections.

So I have to applaud the Spam Prevention Early Warning System’s recent action to blacklist all 700,000 of Telewest’s subscribers - compromised hosts on Telewest’s network were generating 90.4 million emails per day. I’m sure Telewest would debate the “on Telewest’s network” statement above since it was Telewests customers machines that were generating the emails but Telewest have to recognise they have a responsibility to the rest of the network to keep their house in order. This is the only way the spam filters can push back on the ISPs and it is a fair reaction, given the inconvenience imposed. I had a minor concern that my domain would be blacklisted but I’d imagine SPEWS do some more checking than just the From: address!

I’d be interesting to find a measurement of the load the global SMTP servers are under at the moment - they must be red hot, bouncing junk emails around 24×7. I expect to soon see ISPs identify and take compromised customers hosts offline from their networks - or else they’ll start advertising “premium” services on clean subnets, away from the unwashed masses that have all been blacklisted. (Why, oh, why do I expect the second to be the option they go for?)

All in all, unless they can put a stop to this soon, email will become an all but useless tool.

No comments yet.

Leave a comment