2005-08-30T02:48:04Ztag:blog.limedaley.com,2018:/isso/thread/post/new-spammer-recordtag:blog.limedaley.com,2018:/isso/149/5122005-08-30T02:48:04Zjondaley<p>Well, an apology to xeex.com is in order. They got back to me tonight, saying that I need to talk to their downstream provider, planetaryhosting.net. I told him I already had, so he called them up.</p> <p>The downstream provider said the problem has been fixed, and he seems to be right - I can no longer connect to their machine via the smtp port, so perhaps they had gotten hacked into, and didn't mean to be running a mail server in the first place.</p>tag:blog.limedaley.com,2018:/isso/149/5112005-08-29T22:05:24Zjondaley<p>Figured out a bit about this spammer, since although he stopped for a while, and one registrar did remove his hostname (and thus the spam isn't worth much, since it directs you to a non-existent page), I have continued to get a couple connections per second today.</p> <p>I investigated further, and it turns out he is using e-mail software that is not standards compliant, and is getting confused by my mail server's rejection. The problem was that I was rejecting him too fast. Once I let him say who he was, who he wanted to send mail to, etc. he took the rejection much better, and has disappeared.</p> <p>I guess that's what I get for having a spam filter that knows how to reject him before he opens his mouth.</p> <p>I also discovered that xeex.com appears to some sort of ISP, with lots of ip addresses, all for spammers, and since they are so large it is hard to shut them down, I guess. Presumably they have lots of money, so some lawyer needs to sue them or something.</p>