Lampwork Etc.
 
Send a PM to CorriDawn!

LE Live Chat

Enter Live Chat

No users in chat




Beads of Courage


 

Go Back   Lampwork Etc. > Business as usual > Website help and critique

Website help and critique -- Get assistance with your website.

Reply
 
Thread Tools
  #1  
Old 2010-12-23, 12:21pm
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default My email address through Pappashop was used to spam thousands!

My email address from Pappashop was evidently used to send thousands of spam emails. This appears to be an email server problem as I don't have any record of any of these emails coming through my outlook express.

Is anyone else experiencing this? The reason that I know is because I have had 4000+ email undeliverable emails bounced back to my email address. They are all to aol email addresses and appear to be those fake emails telling you that your bank account has been suspended.

Has anyone else been affected. I did open a ticket.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #2  
Old 2010-12-23, 12:28pm
Kalera's Avatar
Kalera Kalera is offline
I'm a lilac!
 
Join Date: Jun 09, 2005
Location: Portland, Oregon
Posts: 8,793
Default

It may not have anything to do with your server at all... usually they are just spoofing the return address of spam sent from their own server. I've had it happen too; it sucks but there is nothing that anyone can really do if that's the case.
__________________
-Kalera

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
*
To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #3  
Old 2010-12-23, 2:22pm
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default

Quote:
Originally Posted by Kalera View Post
It may not have anything to do with your server at all... usually they are just spoofing the return address of spam sent from their own server. I've had it happen too; it sucks but there is nothing that anyone can really do if that's the case.
It wasn't spoofed. I looked at the headers. I was it had been.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #4  
Old 2010-12-23, 4:40pm
SteveWright SteveWright is offline
Senior Member
 
Join Date: Dec 31, 2005
Location: Corpus Christi
Posts: 508
Default

What about a virus? I'd update my virus protection and run a complete scan.
Steve
__________________
Steve & Susie Wright

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #5  
Old 2010-12-23, 5:05pm
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default

Quote:
Originally Posted by SteveWright View Post
What about a virus? I'd update my virus protection and run a complete scan.
Steve
Way ahead of you! However, my computer was even turned on at the time all of the spam purportedly went out.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #6  
Old 2010-12-23, 11:13pm
DreamMuse's Avatar
DreamMuse DreamMuse is offline
Carpe Beadum
 
Join Date: Jul 14, 2005
Posts: 1,793
Default

This happened to me when I was on Pappashop too. I had a couple horrible days of a thousand return emails, then it went away. I'm not sure if Pappashop was able to block the glut of nondeliverable messages, or if it just went away because the spammers changed spoofed email addys.

I always assumed it was spoofing, because I don't know enough about the headers to tell if it's different. However, if you're right that the PS server was hacked, that might well be the cause of my further email problems with the server IP being blocked by spamlists, which was that thread you replied to that I posted about a week ago.

http://www.lampworketc.com/forums/sh...d.php?t=182002

Things that make you go Hmmmmm....

I'm so glad I switched. I went with Westhost; they transferred everything en masse, for free. And the current sale is a great price. I made a thread last week about that too *Chuckles*

http://www.lampworketc.com/forums/sh...d.php?t=182417
__________________
Disa
To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.


"In dreams we pass into the deeper and more universal truth." Carl Jung

Last edited by DreamMuse; 2010-12-23 at 11:25pm.
Reply With Quote
  #7  
Old 2010-12-24, 6:29pm
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default

Thanks Disa!

I did some more research this morning and I found out that my email does not have an SPF authentication attached to it. That's where the email is checked to see if it originates from your approved email server.

I've generated the code now I need to get it installed as part of the DNS for my domain.

In the meanwhile I went into cPanel and deleted the offending email address. It seems like just before the SPAM starts they send out a test email using that email address. I have copies of those as well as copies of the headers that were bounced back with the AOL undeliverable messages.

It seems to me this type of security should have been addressed by my hosting service.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #8  
Old 2010-12-26, 10:36am
Crazy Woman's Avatar
Crazy Woman Crazy Woman is offline
Senior Member
 
Join Date: Sep 08, 2005
Location: Beautiful Colorado
Posts: 2,120
Default

I have Pappashop as well and no problems here. Sorry that you did. What a pain!
__________________
Leslie

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #9  
Old 2010-12-26, 12:21pm
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default

Quote:
Originally Posted by Crazy Woman View Post
I have Pappashop as well and no problems here. Sorry that you did. What a pain!
Thanks, Leslie! I'm working on getting SPF information put in the DNS record.
In the meanwhile I have totally deleted that email address. Hopefully, I'll be able to restore it in a few days.

I sent some emails from my other addresses from the same domain to my AOL email addresses. They went through so I guess the volume of spam wasn't enough to get my domain banned.

All of the headers were authentic. The emails were coming through PS's server.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #10  
Old 2010-12-27, 2:11pm
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default

I checked in Cpanel and there is a way to add an SPF record there through the email authentication option. It would have been nice for them to have told me this when I opened the ticket with the spam problem. I understand that PS is mainly a self managed web hosting type of situation but I don't think the end user should be automatically expected to know all of the security ramifications of email. At any rate I've enabled this now.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #11  
Old 2010-12-28, 10:07pm
dragonlite's Avatar
dragonlite dragonlite is offline
Always learnin' & yearnin
 
Join Date: Sep 19, 2010
Location: Marshall, Tx
Posts: 1,276
Default

I have been having this happen to me too here lately. My AOL account has been use in this way, on several occassions and I have even had my computer "fixed" cleaned and freshly installed antivirus protection for both internet and regular workings......???????????
__________________

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #12  
Old 2010-12-29, 12:45am
Miriam's Avatar
Miriam Miriam is offline
Senior Member
 
Join Date: Nov 16, 2005
Location: The Netherlands
Posts: 644
Default

They used one of my email addresses too. There is nothing you can do about it. Just sit and wait until the returned mails stop.

I didn't change my email address and everything went back to normal after a week. There is no provider that can prevent these things from happening.
__________________
Miriam


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
  #13  
Old 2010-12-29, 11:43am
MaryBeth's Avatar
MaryBeth MaryBeth is offline
novembersfyre everywhere
 
Join Date: Jun 11, 2005
Location: Colorado
Posts: 3,833
Default

Quote:
Originally Posted by dragonlite View Post
I have been having this happen to me too here lately. My AOL account has been use in this way, on several occassions and I have even had my computer "fixed" cleaned and freshly installed antivirus protection for both internet and regular workings......???????????
I've found that when I've had this happen through my AOL addresses that the headers are usually spoofed. I just report it to AOL as spam and *poof* it stops. I think that they probably block domains.

Quote:
Originally Posted by Miriam View Post
They used one of my email addresses too. There is nothing you can do about it. Just sit and wait until the returned mails stop.

I didn't change my email address and everything went back to normal after a week. There is no provider that can prevent these things from happening.

Mine seems to have stopped for now. The SPF record is supposed to help.
__________________
Mary Beth


To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.

To view links or images in signatures your post count must be 5 or greater. You currently have 0 posts.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump




All times are GMT -7. The time now is 3:25am.


Powered by vBulletin® Version 3.7.5
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Your IP: 3.136.154.103