[63817] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SOLVED? was Re: contact at yahoo mail?...

daemon@ATHENA.MIT.EDU (Leo Bicknell)
Fri Oct 10 12:43:42 2003

Date: Fri, 10 Oct 2003 12:42:33 -0400
From: Leo Bicknell <bicknell@ufp.org>
To: nanog@merit.org
Mail-Followup-To: nanog@merit.org
In-Reply-To: <Pine.GSO.4.58.0310101142490.3250@acns.fsu.edu>
Errors-To: owner-nanog-outgoing@merit.edu



--Kj7319i9nmIyA2yE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

In a message written on Fri, Oct 10, 2003 at 11:59:56AM -0400, Scott Stursa=
 wrote:
> They are blocking only the server where we put undergraduate accounts,
> over 60% of which have forwarding set, most frequently to Hotmail, Yahoo
> and AOL accounts. When the spam volume coming in here gets too high, our
> server *appears* to be an open relay (which it is not).

This happens to my server a couple of times a week, but I've noticed
a slightly different pattern.

I also run a mail forwarding service.  What I notice is Yahoo seems
to delete a few accounts (not sure if this is an inactive deletion,
suspension, user closing, or what, all I know is it delivers right
before, and then gets "user unknown" right after).  About 10-30
minutes later, typically from a few spams to the user-unknown
addresses, the server gets blocked with "too many attempts to unknown
addresses".

Now, here's the problem, it now returns that for every yahoo e-mail.
So all the other people with forwards break, and more importantly
there is _NO_ way to tell what userid's are valid or not, short of
going back through the logs and finding the 10-30 minute window
where you got user unknown.  It can be a large amount of work. It also
of course backs up mail queues since they are returning temporary
errors for everything.

I have never had a similar problem with AOL or hotmail.

I submitted requests for help via their web form and they were just
ignored.

--=20
       Leo Bicknell - bicknell@ufp.org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/
Read TMBG List - tmbg-list-request@tmbg.org, www.tmbg.org

--Kj7319i9nmIyA2yE
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE/huF5Nh6mMG5yMTYRAnQqAJwI2tmii+ynJw7nu9p4hTw8U0ekKgCfSzxL
Ds+6iaqEpMJsX6bpkIWI5zY=
=Qv8q
-----END PGP SIGNATURE-----

--Kj7319i9nmIyA2yE--

home help back first fref pref prev next nref lref last post