Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




18 posts

Geek


# 105225 29-Jun-2012 14:55
Send private message

So last week a clients server had a user account hacked, then abused to send bulk spam.
Telecom handled the problem really well.

1st they rang the business owner the next day "your email has been blocked, you are sending so much spam you will shut down the internet" apparently the guy said that 4 or 5 times.

At this point the problem hadn't been identified. I assumed some kind of open relay was created by the techs who installed a scan to email machine a few weeks earlier, and it had been exploited. I ensured there was no relay, turned on maximum event logging.

Next day there was more spam, but I had enabled logging so saw that an IP from germany was loggin in as a local user, and delivering bulk email.

I changed the password/ hardened the password policy, cleared the queues, and thought all done.

Email still wasn't going, senders were bouncing immediately  from the backup mx server hosted by xtra (wierd I thought).

Got xtra to delete the backup record, screw it I thought we'll add it back later.

Still no email, xtra perpetually denied it was them, just wait! can take 24 hours to remove the block (obviously xtra don't manage such things themselves its outsourced to yahoo i bet)

Then several calls later they admitted the server got blacklisted, not by any reputable blacklist (I had been checking) but by xtra, apparently they have their own blacklist, that you can't know about or check yourself, real helpful.

Now a full week later, and after emails had worked again, mail outbound to xtra are borked once more.

Create new topic
3135 posts

Uber Geek

Subscriber

  # 648300 29-Jun-2012 16:08
Send private message

Sign them up for something like SMX and use that for the SMTP server.
That's what we're moving our bigger clients over to.
Never have to worry about being blacklisted again and also works as a backup MX if the client's server goes down.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Disney+ streaming service confirmed launch in New Zealand
Posted 20-Aug-2019 09:29


Industry plan could create a billion dollar interactive games sector
Posted 19-Aug-2019 20:41


Personal cyber insurance a New Zealand first
Posted 19-Aug-2019 20:26


University of Waikato launches space for esports
Posted 19-Aug-2019 20:20


D-Link ANZ expands mydlink ecosystem with new mydlink Mini Wi-Fi Smart Plug
Posted 19-Aug-2019 20:14


Kiwi workers still falling victim to old cyber tricks
Posted 12-Aug-2019 20:47


Lightning Lab GovTech launches 2019 programme
Posted 12-Aug-2019 20:41


Epson launches portable laser projector
Posted 12-Aug-2019 20:27


Huawei launches new distributed HarmonyOS
Posted 12-Aug-2019 20:20


Lenovo introduces single-socket servers for edge and data-intensive workloads
Posted 9-Aug-2019 21:26


The Document Foundation announces LibreOffice 6.3
Posted 9-Aug-2019 16:57


Symantec sell enterprise security assets for US$ 10.7 billion to Broadcom
Posted 9-Aug-2019 16:43


Artificial tongue can distinguish whisky and identify counterfeits
Posted 8-Aug-2019 20:20


Toyota and Preferred Networks to develop service robots
Posted 8-Aug-2019 20:11


Vodafone introduces new Vodafone TV device
Posted 7-Aug-2019 17:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.