Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




18 posts

Geek


# 105225 29-Jun-2012 14:55
Send private message

So last week a clients server had a user account hacked, then abused to send bulk spam.
Telecom handled the problem really well.

1st they rang the business owner the next day "your email has been blocked, you are sending so much spam you will shut down the internet" apparently the guy said that 4 or 5 times.

At this point the problem hadn't been identified. I assumed some kind of open relay was created by the techs who installed a scan to email machine a few weeks earlier, and it had been exploited. I ensured there was no relay, turned on maximum event logging.

Next day there was more spam, but I had enabled logging so saw that an IP from germany was loggin in as a local user, and delivering bulk email.

I changed the password/ hardened the password policy, cleared the queues, and thought all done.

Email still wasn't going, senders were bouncing immediately  from the backup mx server hosted by xtra (wierd I thought).

Got xtra to delete the backup record, screw it I thought we'll add it back later.

Still no email, xtra perpetually denied it was them, just wait! can take 24 hours to remove the block (obviously xtra don't manage such things themselves its outsourced to yahoo i bet)

Then several calls later they admitted the server got blacklisted, not by any reputable blacklist (I had been checking) but by xtra, apparently they have their own blacklist, that you can't know about or check yourself, real helpful.

Now a full week later, and after emails had worked again, mail outbound to xtra are borked once more.

Create new topic
3169 posts

Uber Geek

Subscriber

  # 648300 29-Jun-2012 16:08
Send private message

Sign them up for something like SMX and use that for the SMTP server.
That's what we're moving our bigger clients over to.
Never have to worry about being blacklisted again and also works as a backup MX if the client's server goes down.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Logitech introduces new Made for Google keyboard and mouse devices
Posted 16-Oct-2019 13:36


MATTR launches to accelerate decentralised identity
Posted 16-Oct-2019 10:28


Vodafone X-Squad powers up for customers
Posted 16-Oct-2019 08:15


D Link ANZ launches EXO Smart Mesh Wi Fi Routers with McAfee protection
Posted 15-Oct-2019 11:31


Major Japanese retailer partners with smart New Zealand technology IMAGR
Posted 14-Oct-2019 10:29


Ola pioneers one-time passcode feature to fight rideshare fraud
Posted 14-Oct-2019 10:24


Spark Sport new home of NZC matches from 2020
Posted 10-Oct-2019 09:59


Meet Nola, Noel Leeming's new digital employee
Posted 4-Oct-2019 08:07


Registrations for Sprout Accelerator open for 2020 season
Posted 4-Oct-2019 08:02


Teletrac Navman welcomes AI tech leader Jens Meggers as new President
Posted 4-Oct-2019 07:41


Vodafone makes voice of 4G (VoLTE) official
Posted 4-Oct-2019 07:36


2degrees Reaches Milestone of 100,000 Broadband Customers
Posted 1-Oct-2019 09:17


Nokia 1 Plus available in New Zealand from 2nd October
Posted 30-Sep-2019 17:46


Ola integrates Apple Pay as payment method in New Zealand
Posted 25-Sep-2019 09:51


Facebook Portal to land in New Zealand
Posted 19-Sep-2019 18:35



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.