nanog mailing list archives

Re: what to do about joe-jobs?


From: "Stephen J. Wilcox" <steve () telecomplete co uk>
Date: Wed, 24 Sep 2003 18:26:59 +0000 (GMT)


On Wed, 24 Sep 2003, Stephen L Johnson wrote:
On Wed, 2003-09-24 at 12:48, David Raistrick wrote:
On Wed, 24 Sep 2003, Justin Shore wrote:

<snip>
joe-job earlier this week.  Apparently the joe-jobbing was enough to
convince some extremely ignorant mail admins that Compu.net is spamming
and blocked mail from compu.net.  Compu.net has also seen the effects of


Speaking of joe-jobs, what's the "proper" proceedure for dealing with
such?  

Please forgive my ignorance, but what is a "joe-job"?

Hmm probably something that isnt going to happen now that all domains are valid 
a la verisign

Its when spammers take your domain name and use it as their from address, it 
*used* to get around sender verify in smtp which a lot of smtp servers 
implement. 

Basicalyl if you're being joe jobbed you will get the bounce messages from all 
the email addresses the spammers are sending to that dont exist.

The one that they're doing on my own domain which I mentioned on list some 
months ago is still going strong with many Mbs of bounces per day.. I think its 
fair to say there is very little you can do as tracking the source is almost 
impossible..

Steve


Current thread: