[158138] in North American Network Operators' Group
Re: Recovering from spam resulting from compromised account
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Wed Nov 21 21:42:23 2012
In-Reply-To: <CAGFH+Kmv6i1hnXAD47hrCtxCi4m=fgCob8Mw45D1tFB9wbqN0Q@mail.gmail.com>
Date: Thu, 22 Nov 2012 08:12:07 +0530
From: Suresh Ramasubramanian <ops.lists@gmail.com>
To: Dave Sotnick <sotnickd-nanog@ddv.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Wait it out as in - you had better examine your mail queues and purge them
of any of the spam that was sent and is still queued up.
It'll still take a day or two after that's done for the blocks to subside.
On Thu, Nov 22, 2012 at 7:59 AM, Dave Sotnick <sotnickd-nanog@ddv.com>wrote:
> Thanks Matthew. Sadly, most of the bounce responses have URLs that
> point you to a help page that doesn't have further contact information
> or just tells you to wait it out.
>
> e.g.
>
> http://postmaster.yahoo.com/421-ts03.html
> http://www.google.com/mail/help/bulk_mail.html
>
> I'll do the requisite digging and start contacting postmasters.
>
> -Dave
>
> On Wed, Nov 21, 2012 at 6:13 PM, Matthew Barr
> <mbarr@snap-interactive.com> wrote:
> >
> > On Nov 21, 2012, at 8:53 PM, Dave Sotnick <sotnickd-nanog@ddv.com>
> wrote:
> >> Also had reports that we're still seeing bounces to Gmail, Comcast and
> >> Yahoo accounts.
> >
> >
> > The best thing to do is to go ahead and look at the bounce messages from
> the various ISP's, and see if they have any instructions or URL's to
> contact.
> >
> > If you don't have any of those messages at hand, you can see the bounce
> codes in the logs of your mailserver.
> >
> > If you don't have any useful messages in the bounce code, then you can
> probably look at the site for each ISP, and google their postmaster group.
> >
> > Matthew
> >
> >
> > Matthew Barr
> > Technical Architect
> > Snap Interactive
> > mbarr@mbarr.net
>
>
--
Suresh Ramasubramanian (ops.lists@gmail.com)
