Tenncominc@aol.com email address is being deleted

Mr_Creepy

Well-Known Member
Tenncominc@aol.com email address is being deleted

OFFICIAL NOTICE

23 August 2003

We at Tenncom, Inc. are sorry we have to delete our business email address.

Someone is using this address as a return address in their Outlook program and is sending requests to several disreputable sites, including many that are illegal such as those linked to child pornography and terrorism.

While someone may think this is funny, we wish to let them know that if the perpetrator is found we will be serving them notice for damages of $500,000 or greater and pressing criminal charges.

Since we do not want to be associated in anyway with such groups our email addresses will now be screened.

If you wish to contact anyone at our company please do so through the "Request Information" page at the Tenncom website:

www.tenncom.com/request.php

Thank you for your indulgence in this very serious matter.

John Tenney
Vice President of Tenncom, Inc.
www.tenncom.com
 

Derg

Cap, Roci
Staff member
Re: Tenncominc@aol.com email address is being deleted

I get (got?) more spam than the law allows, but this is how I deal with it.

I own about four domain names and the second you register one on some of the "$5 for 5 billion years!" registrars, you will be deluged with spam from admin@ support@ tech@, etc. I set up my various accounts to automatically bounce mail back to the sender.

On my 'on the road' dialup accounts, I use Earthlink's "Spaminator" whereas if you're not in my addressbook, it'll junk the email, but if a legit person sent me the email, they can request through the software, with a short message produced by Earthlink that the person requests to be added to my addressbook.

Works like a charm!

Then, I have the other email addressses from my broadband service and my jetcareers POP accounts filtered about every 30 seconds on a dedicated machine on my home network running "SpamKiller 2" 24 hours a day.

So when I download mail on the road, my spam is at a minimum.

Without the above technique, I can virtually guarantee you that I'd have one or two-hundred pieces of spam and unsolicited porn. My dedicated spam filter froze one day and all hell broke loose!
 

MQAAord

Scheherazade
Staff member
Re: Tenncominc@aol.com email address is being deleted

I wrote the flight attendant article for jetcareers, and I used to have a email address in the article for people to write to ask questions about becoming/being a flight attendant. I really did enjoy giving advice and helping people out when I could, but I finally had to ask Doug to kill the address because I was getting so much junk mail, I was getting 20 junk messages for every legit one! I wish I'd had a program like yours, Doug!
 

Derg

Cap, Roci
Staff member
Re: Tenncominc@aol.com email address is being deleted

I could upgrade anyone with a jetcareers email address to a pop acccount that I could filter with the software. Just let me know!
 

Mr_Creepy

Well-Known Member
Re: Tenncominc@aol.com email address is being deleted

This is not about spam.

This is about receiving MAILER-DAEMON emails saying that MY emails to all these illicit sites have been refused!

So someone either hacked the account, or they are putting my account name on their "reply-to" line. This is an overt act of hostility.

I have talked to a few other AOL users this is happening to, so this may be a general attack on AOL.
 

Mr_Creepy

Well-Known Member
Re: Tenncominc@aol.com email address is being deleted

I don't have a server like that Doug - this involves AOL mail. I'd like to here more about that server thingie though, because I am trying to figure out how to make my apache server do email.
 

C650CPT

Well-Known Member
Re: Tenncominc@aol.com email address is being deleted

MQAAord
I am sitting here reading current threads and my 3.9 year old walks into my office and sees you avtar, she thinks this is great and keeps saying to the computer "do it again" and with all 3.9 years old she keeps saying it because Bart keeps dropping his shorts. Thanks, I am sure she will be telling her Mom when she gets home and I will have to explain myself. Thanks! I actually like it. I need those precious few smiles each day.
 

Derg

Cap, Roci
Staff member
Re: Tenncominc@aol.com email address is being deleted

[ QUOTE ]
I don't have a server like that Doug - this involves AOL mail. I'd like to here more about that server thingie though, because I am trying to figure out how to make my apache server do email.


[/ QUOTE ]

I think Copaman needs to pop up and give us all a network refresher considering he worked in electronic counterintelligence for the USAF!
 

I_Money

Moderator
Re: Tenncominc@aol.com email address is being deleted

I get about 30-40 spam mails a day on my JC email address. What I think would be good is if you could forward people to the European forum to get questions answered - I check the forum daily, and it will get that forum more active. Let me know what you want to do.
 

Mike Lewis

Shadow Administrator
Staff member
Re: Tenncominc@aol.com email address is being deleted

Well, I am having the same problem, especially now with the latest worms. One of the things is that when someone opens the worm, they send it out from their service, but the worm often goes through that person's address book and takes a random address and uses it for the "From" and "Reply-To" addresses. (I have gotten anti-virus replies from other ISPs sent to me, when clearly, the originating message was not from me.)

Also, like Doug said, spammers troll the Internet looking for open relays. I see that you are now using a form relay on your web page. Well here is how spammers can exploit that: a lot of servers or web sites load up the software in the same places (especially if you are using Microsoft stuff). So, a spammer will visit a web page, put in what they think is the path for the remailer, and when they find that program, they use it to send spam.

Here are some examples from my web-logs:

[Tue Aug 12 11:32:54 2003] [error] [client 209.247.34.205] script not found or unable to stat: /http/rantsinyourpants.com/cgi-bin/formmail.pl
[Tue Aug 12 06:53:56 2003] [error] [client 68.152.168.246] File does not exist: /http/rantsinyourpants.com/cgi/FormMail.cgi

So, if I had a remailer at those locations, the spammer would have found it and exploited it to send spam via my site. I suggest that you rename that file into something like "copa_formmailer.pl" and then modify your page source to call the program using the new name.

I get these idiots trying to access my files all the time; my logs are full of them.

Also, I love it when I see things like this:

Received: from unknown (HELO yahoo.com) (61.182.248.183)
by rantsinyourpants.com with SMTP; 22 Aug 2003 18:18:19 -0000

In this case, Yahoo did not send you the spam. In fact, the "HELO" address can be modified to anything you want it to be. So, instead of "Yahoo.com", you could put "jetcareers.com" or even "whitehouse.gov". The actual IP address in the next set of the parentheses is the actual originating location of the spam; in this case, the IP belongs to "CHINANET Hebei province network". (You will find that most spam originates in China, India, or Brazil, because they use older computers that may not have the latest patches installed on them; and as I have found, most don't care that they serve as a big open relay.) However, if you did have an exploitable "formmail.cgi", you would see your IP address up there in that field.

I always love it when I get spam and it says it is from (HELO rantsinyourpants.com), as if I were sending the spam to myself...

Anyway, those are my tips. Let me know if you have any other questions. I have, unfortunately, become something of a spam expert...
 
Top