Thanks for all this halp guys. I really appreciate it. :> I'll have to investigate all of these delicious solutions and see wat verkz. kthx! Excerpts from plug's message of Wed Mar 11 17:42:40 -0700 2009: > On Tue, Mar 10, 2009 at 4:16 PM, wrote: > > And adding to Lisa's responses, you may need some header evidence to get your from/sending domain off the blacklists, if you've been added.  Otherwise, legitimate messages to/from you may get blocked.   :( > > > > > > > > Sent from my Verizon Wireless BlackBerry > > > > -----Original Message----- > > From: "Bryan O'Neal" > > > > Date: Tue, 10 Mar 2009 15:43:04 > > To: 'Main PLUG discussion list' > > Subject: RE: Fail Message is Fail Messages for Fail Messages that I Never > >        Failedto Send??? > > > > > > First, cheek your logs and see if your sending messages, or watch for SMTP > > traffic.  You can also see if your on a black list.  If you are really > > sending spam you should show up on a few within a couple of hours. > > > > However, the more likely case is that the infected machine is not yours and > > is using your address to forge the from header.  When the receiving server > > fails to deliver it politely informs who it thinks to be the sender.  Some > > servers are even kind enough to attach the original message so you can look > > at the headers. > > > > -----Original Message----- > > From: plug-discuss-bounces@lists.plug.phoenix.az.us > > [mailto:plug-discuss-bounces@lists.plug.phoenix.az.us] On Behalf Of Tuna > > Sent: Tuesday, March 10, 2009 3:36 PM > > To: Main PLUG discussion list > > Subject: Fail Message is Fail Messages for Fail Messages that I Never > > Failedto Send??? > > > > This really clubs me in the kneecaps with a concealed-sword cane. > > > > Over the past two days, I have been getting these messages that would > > suggest that I'm sending viagra spam to people and failing at it. I am > > getting dozens of those qmail-send failmails. Some of them are in Spanish or > > German. I have been just marking them as spam so I wouldn't see them but > > THEY'RE JUST TOO MANY, CAPTAIN!!! > > > > I've actually been thinking of writing a little script server-side to just > > archive them and give them to me in a weekly digest, and during bad spells > > like this I could just have it not send them at all. > > > > If plug-discuss doesn't have a better solution, that is. > > > > kthx > > -- > > Tuna - toss the backscatter and check that you aren't listed as a > source for spam (abuse.net is good) > > at first blush, it sounds like you are the victim of a joe job > (http://en.wikipedia.org/wiki/Joejob) and you should look into adding > an SPF entry to your DNS records (http://www.openspf.org/). That may > or may not help. If not, you may just have to abandon the email > address - joe jobs are one of the few ways I've discovered to actually > fill a gmail account. > > If you are going the hard core email server route, you can block > entire countries/continents by IP block at your firewall (IANA.net). > Only if nobody there has any business contacting you and it still > might get you listed as a not RFC compliant email server. > Unfortunately the easy script that only allows email from hosts you > have made contact with is baffled by load balancing server farms and > will block a lot of real email. > > give SPF a try - Ed -- Andrew "Tuna" Harris Hacker, Caffeine-Addict http://supertunaman.com --------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss