OT: Kerry Vine please read....

OT: Kerry Vine please read....

Post by Kandice Seebe » Mon, 22 Mar 2004 12:59:09



Hi Kerry - I am having trouble responding to your email from earlier today -
it's bouncing - can you please email me?  Thanks!  :)

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

 
 
 

OT: Kerry Vine please read....

Post by armand vin » Mon, 22 Mar 2004 15:05:43


OK I sent more email addresses to try just in case.

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Mon, 22 Mar 2004 21:25:13


I replied - I hope you got it!

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> OK I sent more email addresses to try just in case.

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Tue, 23 Mar 2004 07:22:08


I tried replying again with a new message, but that still bounced.  The
error messages still say it's spam related.  My email address is from
comcast.net, so maybe your ISP is blocking all messages from comcast?  I
tried the hotmail address as well - maybe that one got through.  Eek!  I am
so sorry!

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> I replied - I hope you got it!

> --
> Kandice Seeber
> Air & Earth Designs
> http://www.lampwork.net
> > OK I sent more email addresses to try just in case.

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Wed, 24 Mar 2004 19:13:24


Kerry - I am getting your email but you still aren't getting mine....
I tried one last time, but I think I will go ahead and give you a call
tomorrow.  I am so sorry about the trouble!

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> Hi Kerry - I am having trouble responding to your email from earlier
today -
> it's bouncing - can you please email me?  Thanks!  :)

> --
> Kandice Seeber
> Air & Earth Designs
> http://www.lampwork.net

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Wed, 24 Mar 2004 19:53:09


Also - here's the message I have been getting from the address at
snowcrest.net:

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> Hi Kerry - I am having trouble responding to your email from earlier
today -
> it's bouncing - can you please email me?  Thanks!  :)

> --
> Kandice Seeber
> Air & Earth Designs
> http://www.lampwork.net

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Wed, 24 Mar 2004 19:55:18


Oooops - hit the enter key too fast-

Here's that message:
Permanent Failure:
554_Service_unavailable;_Client_host_[204.127.202.56]_blocked_using_dnsbl.so
rbs.net;_Spam_Received_See:_http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=204
.127.202.56
Delivery last attempted at Tue, 23 Mar 2004 10:08:13 -0000

Can anyone shed any light?  I went to the web page in question and cannot
figure it out.  I got similar messages from all the email addresses Kerry
provided.  It sure is odd - hasn't happened to me before.  I'm sure not
sending spam!

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> Also - here's the message I have been getting from the address at
> snowcrest.net:

 
 
 

OT: Kerry Vine please read....

Post by Tho » Thu, 25 Mar 2004 07:55:42


The short of it is the message bounced cause the client host is on the
blacklist at sorbs.net for spamming reasons.  I went to the url and
ran a check and according to the results the IP is in the "Database of
servers sending to spamtrap addresses".

The details were:
Address or Block        204.127.202.56 / 32
Description     spam source - proxy smarthosting
Entry Created   Thu Mar 4 20:55:31 2004 GMT
Entry Last Seen Tue Mar 23 11:59:50 2004 GMT
Spam Seen From  204.127.202.56

It says you can't get automated removal and should see
http://www.dnsbl.us.sorbs.net/SpamDBFAQ.html

If the IP is that of your home PC, I'm guessing you got a virus or
trojan and it is sending SPAM out.  From the above entry created date
I'd say you got the virus/trojan on or a few days before March 4.  Get
an anti-virus program and install it....

Thom

Quote:

> Oooops - hit the enter key too fast-

> Here's that message:
> Permanent Failure:
> 554_Service_unavailable;_Client_host_[204.127.202.56]_blocked_using_dnsbl.so
> rbs.net;_Spam_Received_See:_http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=204
> .127.202.56
> Delivery last attempted at Tue, 23 Mar 2004 10:08:13 -0000

> Can anyone shed any light?  I went to the web page in question and cannot
> figure it out.  I got similar messages from all the email addresses Kerry
> provided.  It sure is odd - hasn't happened to me before.  I'm sure not
> sending spam!

> --
> Kandice Seeber
> Air & Earth Designs
> http://www.lampwork.net

> > Also - here's the message I have been getting from the address at
> > snowcrest.net:

 
 
 

OT: Kerry Vine please read....

Post by Tho » Thu, 25 Mar 2004 08:00:27


Quote:

> Oooops - hit the enter key too fast-

> Here's that message:
> Permanent Failure:
> 554_Service_unavailable;_Client_host_[204.127.202.56]_blocked_using_dnsbl.so
> rbs.net;_Spam_Received_See:_http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=204
> .127.202.56
> Delivery last attempted at Tue, 23 Mar 2004 10:08:13 -0000

> Can anyone shed any light?  I went to the web page in question and cannot
> figure it out.  I got similar messages from all the email addresses Kerry
> provided.  It sure is odd - hasn't happened to me before.  I'm sure not
> sending spam!

> --
> Kandice Seeber
> Air & Earth Designs
> http://www.lampwork.net

> > Also - here's the message I have been getting from the address at
> > snowcrest.net:

 Okay I thought I hit post but maybe not....

This basically means the host is on the black list at sorbs.net for
sending spam.

204.127.202.56 found in Database of servers sending to spamtrap
addresses
Address or Block        204.127.202.56 / 32
Description     spam source - proxy smarthosting
Entry Created   Thu Mar 4 20:55:31 2004 GMT
Entry Last Seen Tue Mar 23 11:59:50 2004 GMT
Spam Seen From  204.127.202.56

That's the info from a search on their site.  I'd say that if this is
your system you either have a virus or trojan sending out SPAM from
your computer.  I'd say you got it on or a few days before March 4.
Get an anti-virus program and install it, I use Norton on my windows
boxes...

Thom
http://www.lampworkglass.com

 
 
 

OT: Kerry Vine please read....

Post by armand vin » Thu, 25 Mar 2004 09:44:04


KS, did you try sending to my hotmail address??

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Thu, 25 Mar 2004 16:49:25


Well, I have an anti-virus program, and I use it.  It's AVG, and has worked
wonderfully for me for a couple of years now.  I also have Mailwasher, which
allows me to delete messages from my server before downloading them if they
are spam or viruses.  I also have a hardware firewall and a software
firewall. I test my system for viruses every day, and I update the virus
software every other day.  I can say with 99.9% certainty that I do not have
a virus.  I also have not had this issue with any other email.  My ISP is
Comcast, and it's cable.

According to Kerry's husband, their ISP uses pretty strict filters, so he is
getting some help from them.  Thanks for the info, though.

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:

>  Okay I thought I hit post but maybe not....

> This basically means the host is on the black list at sorbs.net for
> sending spam.

> 204.127.202.56 found in Database of servers sending to spamtrap
> addresses
> Address or Block 204.127.202.56 / 32
> Description spam source - proxy smarthosting
> Entry Created Thu Mar 4 20:55:31 2004 GMT
> Entry Last Seen Tue Mar 23 11:59:50 2004 GMT
> Spam Seen From 204.127.202.56

> That's the info from a search on their site.  I'd say that if this is
> your system you either have a virus or trojan sending out SPAM from
> your computer.  I'd say you got it on or a few days before March 4.
> Get an anti-virus program and install it, I use Norton on my windows
> boxes...

> Thom
> http://www.lampworkglass.com

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Thu, 25 Mar 2004 16:50:04


Yep, I did.  :)  It was nice talking to you on the phone tonight - hope we
can figure this out soon!  :)

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> KS, did you try sending to my hotmail address??


 
 
 

OT: Kerry Vine please read....

Post by Tho » Fri, 26 Mar 2004 07:50:12


Quote:

> Yep, I did.  :)  It was nice talking to you on the phone tonight - hope we
> can figure this out soon!  :)

> --
> Kandice Seeber
> Air & Earth Designs
> http://www.lampwork.net

> > KS, did you try sending to my hotmail address??


Did you check to see if the IP listed as the offender is the IP
address of your system?  You may have to check your firewall to see
what it is there.  I am assuming you are using a dsl/cable router as
your firewall and in all likelyhood it is handing IP's out to your
systems on the backside of it and is using an IP provided by your ISP
as it's internet facing IP.  Either way if the mail server that is
recieving your mail for delivery is checking against a black-hole list
and your system/IP is on the list most likely you will have to get
your system off the list before they will accept mail from you.  I am
guessing that if your IP is in fact on the list and you are reasonably
sure you are virus/trojan free, then most likely your dynamically
assigned IP was previously assigned to someone that had a
virus/spamming trojan.  You can try shutting down your system, most
likely your router/firewall I am guessing in your case, leave it off
for an hour or so, the turn it back on.  Before you do this, check the
IP and make sure you get a different one after you reboot it.

Thom
http://www.lampworkglass.com

 
 
 

OT: Kerry Vine please read....

Post by Kandice Seebe » Fri, 26 Mar 2004 08:16:43


Thom -
I have Zone Alarm as my software firewall.  I am not sure what the hardware
firewall is - hubby set that up.  I will ask him about it and try what you
said just to be sure.
Kerry's husband determined that the filters his ISP have set up block all
comcast email due to high incidence of spam.  We've fixed the problem so I
can email them.

--
Kandice Seeber
Air & Earth Designs
http://www.lampwork.net

Quote:
> > Yep, I did.  :)  It was nice talking to you on the phone tonight - hope
we
> > can figure this out soon!  :)

> > --
> > Kandice Seeber
> > Air & Earth Designs
> > http://www.lampwork.net

> > > KS, did you try sending to my hotmail address??

> Did you check to see if the IP listed as the offender is the IP
> address of your system?  You may have to check your firewall to see
> what it is there.  I am assuming you are using a dsl/cable router as
> your firewall and in all likelyhood it is handing IP's out to your
> systems on the backside of it and is using an IP provided by your ISP
> as it's internet facing IP.  Either way if the mail server that is
> recieving your mail for delivery is checking against a black-hole list
> and your system/IP is on the list most likely you will have to get
> your system off the list before they will accept mail from you.  I am
> guessing that if your IP is in fact on the list and you are reasonably
> sure you are virus/trojan free, then most likely your dynamically
> assigned IP was previously assigned to someone that had a
> virus/spamming trojan.  You can try shutting down your system, most
> likely your router/firewall I am guessing in your case, leave it off
> for an hour or so, the turn it back on.  Before you do this, check the
> IP and make sure you get a different one after you reboot it.

> Thom
> http://www.lampworkglass.com

 
 
 

OT: Kerry Vine please read....

Post by armand vin » Fri, 26 Mar 2004 13:17:37


Comcast is on the black hole list.
My system administrator has contacted them and they have not done anything
about the problem. They are on the "SORBS" list for allowing too much spam.
They removed the black hole filter from my account so that I could get email
from several people on Comcast. However, this does nothing to address the
problem that put comcast on the list.