<html>

<head></head>

<body>
    <div class="item">
        <div class="item-header">



        </div>

        <div class="item-body">

            <p></p>
            <p>Our mail servers are being spammed and joe jobbed to death. Things are so bad I see at least 100 bounces caused by joe jobbing for each valid email. At the same time we are getting a huge amount of same at least 100 spams for one legit mail. That's not all there are so many emails being sent to none existent users of our domains, that the mail server has a massive queue of bouncers.</p>
            <p>Mail server is qmail and we are using russel nelson's double bounce trim patch. Even so one mail server has a massive queue that is always in excess of 5000 message. Atrocious. When these are bounced the receiving server thinks we are sending out spam! This particular server is temporarily black listed on yahoo and comcast.</p>
            <p>We decided to adapt several measures to counter it, if sucessfull (meaning we don't lose any legit mails). It will be carried over to the other servers as well. The most important change was to the queuelifetime. By default qmail will keep a message in it' queue for a week. That's rediculous. We changed to to less than half day on the machine that's worst effected. We don't use it for outgoing mail, so we can afford to.</p>
            <p>We have changed two other control files timeoutremote and timeoutsmtpd they control the timeout setting for SMTP connections. They both default to an atrocious 20 minutes. Some mail servers will sleep when it encounters spam. Remember even though we are not sending out spam of our own, the messages that we are returning would be tagged as spam. This results in at least half a dozen qmail-remote processes just waiting at any time. What a waste of resources.</p>
            <p>Then we decided to try something similar on our own. We applied the tarpitting patch so that qmail will now wait a few seconds (nothing drastic) when there are more than two rcpts in the transaction.</p>
            <p>The last step was to and SPF. We didn't create our own SPF records but patched qmail with both the big DNS patch and the SPF patch so that we can reject mails where the sender and the outgoing mail server don't match. Currently the spfbehavior is configured to just create the SPF headers without blocking. Initial findings are dissapointing. Only a small percentage of mails have any SPF records at all.</p>
            <p>Though SPF is not effective, the other methods certainly are effective at least in reducing the load on the server if nothing else. On the machine that was worst effected the queue has slid down to the 1000 message level where as it was at the 5000 levels earlier.</p>
            <p></p>

        </div>
    </div>


</body>

</html>

Spammed and Joe Jobbed to Death.

<html>

<head></head>

<body>
    <div class="item">
        <div class="item-header">



        </div>

        <div class="item-body">

            <p></p>
            <p>My <a href="1100.html">Nokia 6151</a> has been ailing for sometime, now it's dead.</p>
            <p>The green button (the answer button) on it died a couple of months ago. Since then I have been using the middle button to answer incoming calls. To make a call I have to click the middle button at least three times while traversing through the menus. Quite annoying but I put up with it cause I am broke thanks to the house building efforts.</p>
            <p>Another issue with the phone is that the ringer stops working all of a sudden. It has an annoying habit of switching itself into silent mode on its own but that's a separate issue. I have had the ringer die on me at least three times.</p>
            <p>The most recent time it happened was just a week ago. I tried to reboot the phone because the last time it happened rebooting did the trick. Unfortunately when I pressed the power button it went in and got stuck and the phone wouldn't switch off.</p>
            <p>I managed to sort out the dead speaker issue by switching the phone into the silent profile and back into general profile. However I then had a bigger issue - if the batter died, I have no way of switching it back on again. In the meaintime I ordered a new phone an e61 finally got my hands on it today.</p>
            <p></p>

        </div>
    </div>


</body>

</html>

Monthly Archives for 2008 04

Spammed and Joe Jobbed to Death.

Nokia 6151 Dead