[PLUG] Joe Jobbed

Don J. auderive at gmail.com
Thu Oct 4 11:26:31 UTC 2007


Don't RBLs usually only blacklist the sending host's IP, not the
domain of the return-address? Either way, if someone reported your
domain, getting off a blacklist is 'usually' a quick 1-2 hour wait
depending on the mood of the abuse department at AOL, Comcast or
whatever RBL you're on.

Backscatter happens all the time, and from my experience it's never a
huge problem on the home server side--just clean the queue if messages
are piling up there. If it's a huge flood, it may be easier on your
mailserver to blackhole instead of rejecting the messages, though I
think this is against some RFC..

Anyway good writeup, and good luck!

Don Johnson

On 10/4/07, Ed Sawicki <ed at alcpress.com> wrote:
> My mail server has been joe jobbed. Any advice is appreciated.
> The story so far is here:
>
> http://www.biznix.org/articles/technical/joejob.html
>
> Ed
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>



More information about the PLUG mailing list