[CS-FSLUG] Windows 7 conectability issues.

[Tim Young]

Hi,
The link that the RBL sent you says:

67.228.245.162 listed in bl.spamcop.net (127.0.0.2)

Causes of listing

  * System has sent mail to SpamCop spam traps in the past week (spam
    traps are secret, no reports or evidence are provided by SpamCop)

What this means is that your IP has sent out some email to specific 
email address that have been fed into the spam machine.  Some 
anti-spam people have crafted emails that may be something like: 
tim.young at spamcatcher.com   There is no user at that location, but 
instead, anyone who sends something to that email address gets 
automatically put on a spam list.  Then the anti spam people take 
those addresses and feed them into the spam machine, making sure the 
various spam lists of email addresses have them.

Quite likely, the host you are using, or perhaps your "hisfeet.net" 
server has been compromised, and there is a spam-bot running on it.

Can you tell me a little about the server?  I see the hisfeet.net 
domain is registered to David McMullen, so that tells me you own the 
domain.  Do you own the machine too, or is it hosted for you by 
someone else?

I am in Mitla at the moment, actually teaching a class on "intrusion 
detection and intrusion recovery" (how to detect that you have been 
hacked and how to recover from being hacked), and do not have a lot 
of free time these next few days.  But next week (starting Sat, but 
Mon may be better) I should be able to look at it for you if you need 
me to.

     - Tim Young

On 2/4/2013 5:56 PM, Dave McMullen wrote:
> I hope this gets through. For some reason my emails to the forum are
> getting returned by some "spamcop"agent along the way.  never happened
> before today.
> This is the last message that I sent,
>
> Strange thing. I was blaming Windows7 for this anomoly, but it may be
> hardware, or a hardware adjustment.  I bootted up with a Puppy five disc,
> and wound up with the same symptoms.  I can ping the modem from the
> laptop, and also the other computer on the network, but can't access the
> internet, although I can access the internet with the other computer on
> the network.
> I don't see any reference to WEP OR in th Bios settings. WPA.
>   DavidM
>
> Here is the header that came on the returned mail:
>
>
>
>
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>    christiansource at ofb.biz
>      SMTP error from remote mail server after RCPT TO:<christiansource at ofb.biz>:
>      host ofb.biz [208.43.84.99]: 550-"JunkMail rejected - trinity.pjlhosting.com
> [67.228.245.162]:53639 is in an
>      550 RBL, see Blocked - see http://www.spamcop.net/bl.shtml?67.228.245.162"
>
> ------ This is a copy of the message, including all the headers. ------
>
> Return-path: <davidm at hisfeet.net>
> Received: from localhost.localdomain ([127.0.0.1]:53203
> helo=trinity.pjlhosting.com)
>          by trinity.pjlhosting.com with esmtpa (Exim 4.80)
>          (envelope-from <davidm at hisfeet.net>)
>          id 1U2VPF-001pU1-Lr
>          for christiansource at ofb.biz; Mon, 04 Feb 2013 17:24:57 -0600
> Received: from 187.158.144.69 ([187.158.144.69])
>          (SquirrelMail authenticated user davidm at hisfeet.net)
>          by trinity.pjlhosting.com with HTTP;
>          Mon, 4 Feb 2013 17:24:57 -0600
> Message-ID: <e4b2e97d80d386e4084affdba961e947.squirrel at trinity.pjlhosting.com>
> In-Reply-To: <510FB719.9060502 at LightSys.org>
> References: <5109D58C.3000307 at lightlink.com>
>      <5de742736ac185f2f8f41ee6985b6425.squirrel at trinity.pjlhosting.com>
>      <510C0575.6050209 at lightlink.com>
>      <40df45fe05272ebbf0cee575d9ec94ff.squirrel at trinity.pjlhosting.com>
>      <510F08D3.9060206 at lightlink.com>
>      <126b232fb86772fe5a2064b59d43d252.squirrel at trinity.pjlhosting.com>
>      <510FB719.9060502 at LightSys.org>
> Date: Mon, 4 Feb 2013 17:24:57 -0600
> Subject: Re: [CS-FSLUG] Windows 7 conectability issues.
> From: davidm at hisfeet.net
> To: "A Christian virtual Free Software and Linux Users Group."
> <christiansource at ofb.biz>
> User-Agent: SquirrelMail/1.4.22
> MIME-Version: 1.0
> Content-Type: text/plain;charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
> X-Priority: 3 (Normal)
> Importance: Normal
>
> who can I contact about this.?
>
> _______________________________________________
> ChristianSource FSLUG mailing list
> Christiansource at ofb.biz
> http://cs.uninetsolutions.com
>