Unable to define Spam emails!

When I define emails as SPAM (some are ***@btinternet.com) they keep appearing in my Inbox. I've had many issues with BT Mail since the begining of October 2014. I've been dealing with the support team now over this remaining issue and they have finally stated "emails defined as Spam will only be reconised as such if more than 10 BT customers have defined them" . I find it hard to believe. I ran a test with a two friends that have bt mail address and all of use have the same SPAM issue. Can anybody please advise me how I can define SPam emails?

Apple_Princess,
I'm so sorry, but I see my links have directed you to the 10.3 Usage forum and not the correct leopard forums that I wanted to link to:
Using Mac OS X Leopard:
http://discussions.apple.com/forum.jspa?forumID=1225
Mac OS X Leopard Mail & Address Book forum:
http://discussions.apple.com/forum.jspa?forumID=1223
Sorry, my copy paste isn't what it used to be
littleshoulders

Similar Messages

Unable to mark Spam email

We all get spam. When I put a check next to an email and hit "spam" , it says "Email marked as spam" then changes itself to "email marked as NOT spam". What's going on????? The anti virus program can't find anything wrong, but the same group of emails are "un-spaming" themselves. I'm averaging 20+ a day. Any ideas?

There might be a possibility that you BES admin has restricted personal configuration in enterprise activated device. Please consult with company's BES admin to know more on the issue.
tanzim
If your query is resolved then please click on “Accept as Solution”
Click on the LIKE on the bottom right if the post deserves credit

Unable to delete aol emails

I am unable to delete any emails that come to my aol account.I get a "unable to move message, this message could not be moved to the mailbox trash." I am able to delete emails that come to my mac or gmail accounts. Any ideas why I am unable to delete aol messages?

In Settings > Mail, Contacts, Calendars > (Your account name) > Advanced > Deleted Mailbox - set for the "On My iPhone" Trash for a POP account, or "On the Server" for an IMAP account. If it is an IMAP account, be sure the correct server mailbox is selected
or
Settings - Mail - Tap on AOL account - Tap on Advanced - Tap on SPAM so you get a check mark - Then tap on Trash on the very top so you get a check mark. Now go check AOL mail and attempt to delete.
Message was edited by: Dynamite DJs

Help! My home mac is sending spam emails!

Hello,
I am a long time mac user, and have never encountered this problem before. In fact I've only heard about this on windows:
My home mac is sending out spam via my primary email address.
I discovered on Friday morning that sometime on Thursday afternoon a bunch of spam emails were sent out to people present in my addressbook while I was on my home Mac (there are other unfamiliar address too, but many from my addressbook). I checked my home directory for viruses using Norton Antivirus and found a virus: Trojan.ByteVerify and some related files. I deleted them, and rechecked the directory, and found nothing more, so I thought that was the end of it.
However I checked this afternoon and found two more batches of spam emails had been sent, yesterday early afternoon and again today late afternoon. Norton continues to find nothing in my home directory, nor does Little Snitch report any unsolicited activity.
I assume my Mac is to blame, as the emails have only gone out when I am active on the computer and connected to the internet.
I have the firewall on, and Norton checks all downloads, but beyond that I'm not sure what else I can do. I am right now working from an 'emergency' drive which I hope has not been affected.
I am prepared to erase my primary startup drive and rebuild it, IF that will solve the problem, but I am looking for some guidance. None of my tools seems to be reporting anything wrong, and yet something definitely is! I thought Mac OS X was immune to this sort of thing, but it appears not.
Any help would be appreciated as to what I can look for or do (aside from giving up and rebuilding the startup drive).
Thank you,
Rob

Hi folks,
An update 10 days after the problem first appeared...
It seems clear that:
- someone is able to mimic my old email address and send spam to people, making it look like it is coming from my address. At least some of these spam emails are showing up in my "Sent" messages folder in the compromised email account.
- Somehow, the spammer has obtained my address book, which is being used (in part) as a source of addresses for spam recipients. I know this because among some unknown spam destinations are scattered addresses I have in my address book from both work and personal life. I have no idea how this could have happened. I have not emailed my address book anywhere. I have in the last month or so used dropbox to start synchronizing address book between home and work macs (so the master resides on dropbox), Those are the only places my address book resides. I see no sign that my dropbox account is compromised, but I might abandon cloud computing for now after this!
- Spam (pretending to be me as a source) is only being sent out when I am actually using my home macintosh computer. I am certain of this now, after 10 days of viewing the pattern. The first spam was Thursday June 24, when I was on the Mac, and there have since been about 6 or so spam 'waves'. None on the 25th, but on the 26th, 27th, 29th, and 30th. I did not turn on my home Mac on the 25th, 28th, nor between July 1-5, and there has been no spam on those days. Is it possible for someone to monitor my IP address and send spam out when the monitor sees me communicating with the outside world?
What I've done:
- I created a new mac OS system from scratch on my home computer, containing no files with modified date June 24 or later. That new system is using Norton Antivirus for Mac, firewall on in stealth mode (allowing only email, web, and normal system operation), Little Snitch (I've enabled very few operations to be allowed automatically), and using a Mac OS X account that does not have administrative access.
- I have tried to change the settings of the AOL free account (at least change the password), but am unable to do so. When I log into my account on the web, click settings and change password, it asks me my security question, then I get a French page (not my choice) showing some of my account settings, with nothing to click that would allow me to change settings. There also seems to be no way to delete or cancel an aol free email address account; the best advice I've seen is that it will be deactivated after 90 days of inactivity, which in this case won't happen if spam is being sent from that address and appearing in the Sent folder. I will continue to investigate ways to do this; I might end up having to write a snail mail letter to AOL Canada asking them to delete the compromised account.
- I have pretty well abandoned the compromised email account, migrating most of my email subscriptions to a new email address and informing who I can that the old email is a spam source. Is there any way to report the email address as spam centrally?
- Finally, I am going to contact my ISP today and see what they can do; maybe I can get a different IP address at home...
If anyone has further suggestions I would appreciate it. What a nightmare!
Thank you,
Rob

UCCX Send eMail unable to send external emails

Hi,
I created a script where it asks the user to record a prompt and then it sends that prompt as an attachment via email. I am able to get it to send the email internally on our domain, however unable to send the email externally. I did a Reactive Script debug and there are no error messages. I tried searching through the MIVR logs but cannot find anything, or don't know what to look for. Any insight? We are running UCCX 8.5 Premium. Are there any tests I can do through the CLI to test port connectivity to Exchange? It's very odd that it's able to send the email internally.
Thank you.

If its getting to Exchange and you are able to send emails internally but not externally, i think its an exchange issue. Maybe its because the From address is not assigned in Exchange and Exchange or your spam filter might not allow to send emails out.

Unable to send out emails via outlook express since 06/29/2010

Task '[email protected]" - Sending' reported error (0x80042109) : 'Outlook is unable to connect to your outgoing (SMTP) e-mail server. If you continue to receive this message, contact your server administrator or Internet service provider (ISP).' This is a copy/paste of error message from Office Outlook 2003
Our household has been unable to "send" outgoing emails since 06/29/2010. This includes a wireless laptop and a PC. We both lost the ability to send emails same day. We changed NOTHING and did not share emails with each other that would have corrupted our system. During this time I have had 2 Verizon techs dance around in the PC doing all the same things I did as well as what the automated assistant did. The last tech said the Outlook Express 6.0 was corrupted, and to unistall it and then reinstall; this time 2 hours later, I think he just gave up). That did not work either. I tried using the Outlook Office and still got an error message for outging. Everything is set up as it was when it was working until 06/29/2010. I was told that there was a new server being installed and that things wold be working by 07/02/2010... I have tried taking down the firewall, turning off virus protection (McAfee), changing from outgoing.yahoo.verizon.net to just outgoing.verizon.net, checking boxes, unchecked boxes. SMPT is set to 587. We get incoming fine. I hate using the "Verizon email site" as too much monkey motion to get to mail, but that's what we have been doing. I even tried setting up a GMail account, again got mail still could not send. Any ideas?

Thank you for your response! I even tried sending an email via dos prompt with Telnet, got past "HELO", but when trying to get a "RCPT TO" (using outgoing.yahoo.verizon.net) I got an "authorization required" response and then was dropped. I have been passed around without a solution. I am about ready to change ISP, but really hate to as most of the time (years now) this has been a decent ISP. If Verizon is having a problem just say so, I can handle it, honesty would be nice, refreshing and not wasting so much of my time as well as the techs!

Unable to define Radio Button Text field & unable to change column position

Hi,
While designing a screen in Screen Painter, I am unable to define Radio Button Text field as this option is not there in Graphical Element. And also I want to specify the starting position of column of that element different from the default value, but I am unable to define that because the field is non-editable.
Can any one please help me out.
Regards,
Koushik

Hi,
Please find below the sample program from ABAP docu :
PROGRAM demo_dynpro_input_output.
DATA: input TYPE i,
      output TYPE i,
      radio1(1) TYPE c, radio2(1) TYPE c, radio3(1) TYPE c,
      box1(1) TYPE c, box2(1) TYPE c, box3(1) TYPE c, exit(1) TYPE c.
CALL SCREEN 100.
MODULE init_screen_100 output.
CLEAR input.
radio1 = 'X'.
CLEAR: radio2, radio3.
ENDMODULE.
MODULE user_command_0100 input.
output = input.
box1 = radio1.
box2 = radio2.
box3 = radio3.
IF exit NE space.
    LEAVE PROGRAM.
ENDIF.
ENDMODULE.
Here radio1(1) TYPE c is defined within the program but in the element list there are RADIO1 element exist. One is actual radio button and the other is Radio Button Text.
I am not able to create that radio button text using same object name.
Please suggest.
Regards,
Koushik

I am unable to open encrypted emails using webmail and a CAC reader. It says "content can't be displayed because the S/MIME control isn't available." I'm using a Macbook Pro with 10.10 OS and have tried both Safari and Chrome.

I am using a Macbook Pro with OS X Yosemite 10.10.2. I am unable to open encrypted emails using webmail. I have verified my certificates are loaded in the keychain for my military common access card while using a CAC reader. When I try to view the message it gives me the error saying "content can't be displayed because the S/MIME control isn't available."

I am using a Macbook Pro with OS X Yosemite 10.10.2. I am unable to open encrypted emails using webmail. I have verified my certificates are loaded in the keychain for my military common access card while using a CAC reader. When I try to view the message it gives me the error saying "content can't be displayed because the S/MIME control isn't available."

Unable to delete an email from a Gmail account in Mail

I am unable to delete an email from my Gmail (IMAP) account within Mail on my MacBook. I get an error message that says there are no matches with the email. It does not show in Mail on my iMac or on my Gmail account online. I have rebuilt the mailbox, but don't know any other steps to try to fix this problem.
Does anyone know how to delete this email?
Thanks -
Dudley Warner

ibosie /V.K. -
Thanks for the suggestions. I did not find the message on my Gmail Internet account. I went into Mail Preferences, and used the Advanced tab under my Gmail account to uncheck "Enable this account". The account folders disappeared. When I restarted Mail and enabled Gmail again, the email was initially gone, but a few minutes later, reappeared. I don't know anything else left to do except delete the account and recreate it If you think of anything else, please let me know.
Thanks -
Dudley

Unsolicited explicit spam email to an iCloud email address

I've been getting explicit spam email to my iCloud email address from a site in the USA for over a month. And no I haven't signed up for something and am not admitting it............and I'm in Australia so any "benefits" of the site are a long way away.
I've tried contacting the sender but because I've never used the iCloud account (my email is a me.com account) it's being rejected.
How can I delete the iCloud side of my without affecting the me.com email address ?
I believe that the iCloud user name may well exist with someone else in the USA because I've been told that is possible - anyone else know this ?
Any advice welcome...it's ceased being funny.

If it's always from the same sender, set up an email rule on icloud.com to send email from the sender to the trash. This explains how to set up an email rule: http://help.apple.com/icloud/#/mm6b1a3f8a.

Since my last firefox update, I have been unable to type an email - the text box does not appear when I press 'reply' , or press 'compose'. The email provider is '123-reg.co.uk. I have been using both firefox and the provider ['webfusion Ltd/webmail123] s

Hello. Since my last firefox update, I have been unable to type an email - the box within which one would usually type does not appear when I press 'reply' to a received email, or press 'compose'. The email provider is '123-reg.co.uk. I have been using both firefox and the provider ['webfusion Ltd/webmail123] successfully for well over a year. The provider says it is a browser problem. I can still add an attachment to the email header, which successfully can be sent, but the recipient gets my standard email 'signature' with font messages and the attachment. Can anyone help? My email addresses are [email protected] [this is the one with the issue] and [email protected] in English
== today

My daughter has had her Razr for about 9 months now. About two weeks ago she picked up her phone in the morning on her way to school when she noticed two cracks, both starting at the camera lens. One goes completely to the bottom and the other goes sharply to the side. She has never dropped it and me and my husband went over it with a fine tooth comb. We looked under a magnifying glass and could no find any reason for the glass to crack. Not one ding, scratch or bang. Our daughter really takes good care of her stuff, but we still wanted to make sure before we sent it in for repairs. Well we did and we got a reply from Motorola with a picture of the cracks saying this was customer abuse and that it is not covered under warranty. Even though they did not find any physical damage to back it up. Well I e-mailed them back and told them I did a little research and found pages of people having the same problems. Well I did not hear from them until I received a notice from Fed Ex that they were sending the phone back. NOT FIXED!!! I went to look up why and guess what there is no case open any more for the phone. It has been wiped clean. I put in the RMA # it comes back not found, I put in the ID #, the SN# and all comes back not found. Yet a day earlier all the info was there. I know there is a lot more people like me and all of you, but they just don't want to be bothered so they pay to have it fix, just to have it do it again. Unless they have found the problem and only fixing it on a customer pay only set up. I am furious and will not be recommending this phone to anyone. And to think I was considering this phone for my next up grade! NOT!!!!

On my imac, All of a sudden I am unable to send original emails with any attachments. I can attach the file but when I try to send it, it won't send. Also, if I am emailing back and forth as it gets longer, it no longer transmits

On my imax, all of a sudden I am unable to send original emails with attachments of any size. I can attached the file but when I try to transmit, it will not go.
Also, if I am emailing back and forth, once there gets to be several threads, it will no longer transmit. Any suggestions. I am using gmail in the apple mail system

Mike,
Are any of your other applications going wonky, or is it just Logic?
I'm afraid I've never heard of this particular problem before, but if it were happening to me the first thing I would do is delete my "com.apple.logic.express.plist" file in Library>Preferences, then repair permissions in Disc Utility, and finally restart my computer. Then I would launch Logic and see if the problem has been corrected. It's amazing how much these two steps can accomplish.
If that doesn't resolve the issue I would launch Logic and go to Preferences>Audio Units Manager to see if all my plug-ins are properly validated.

I'm unable to add the email address for iMessage, that I was using before iOS 7 to my iPhone, because it says that it is "in use by another device," but I have no other devices. How do I resolve this so I can add this email address to my iPhone?

I'm unable to add the email address for iMessage, that I was using before iOS 7 to my iPhone, because it says that it is "in use by another device," but I have no other devices. How do I resolve this so I can add this email address to my iPhone to send and recieve iMessages?

Sync your iPhone to iTunes, and see if that does the trick. Also you could try a Soft Reset with no Risk to Data. Holding down both the Sleep button and the Home button until the Apple logo appears and then waiting for the Reset to bring you iPhone back to the lock screen. Are you trying to add the email at Settings>Messages>Send and Receive from (2 Addresses) your iPhone number and your email address?

I suddenly am unable to retrieve my emails. I discussed this with my Internet provider, but still get an error message and can't access my emails. Any suggestions???

I am unable to retrieve my emails since yesterday. I called Time Warner Cable, my Internet provider, but they could not help me; they stated that the settings had changed, since they were upgrading. I adjusted the settings, but still get an error message:
          Alert
          There may be a problem with the mail server or network. Verify the settings for account "Mail 1" or try again.
          The server returned the error: The connection to the server "smtp.roadrunner.com" on port 110 timed out.
I changed the server, and the port, as Time Warner Cable tech rep recommended, but to no avail. They recommended I delete my current email account and recreate it, but that I check with Apple first, because I might lose my contact list (and any email messages I'd previously saved!?). They suggested Apple might be able to tell me how to not lose the contacts, emails, profile.
Any help would be appreciated.

Hi, what Interface are you using, & which one are you checking?
Each Interface will have it's own settings.
Though all of these steps may or may not be needed, I'm including them all.
Make a New Location, Using network locations in Mac OS X ...
http://support.apple.com/kb/HT2712
10.7 & 10.8…
System Preferences>Network, top of window>Locations>Edit Locations, little plus icon, give it a name.
10.5.x/10.6.x/10.7.x instructions...
System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
The interface that connects to the Internet should be dragged to the top of the list.
10.4 instructions...
Is that Interface dragged to the top of Network>Show:>Network Port Configurations.
If using Wifi/Airport...
Instead of joining your Network from the list, click the WiFi icon at the top, and click join other network. Fill in everything as needed.
For 10.5/10.6/10.7/10.8, System Preferences>Network, unlock the lock if need be, highlight the Interface you use to connect to Internet, click on the advanced button, click on the DNS tab, click on the little plus icon, then add these numbers...
208.67.222.222
208.67.220.220
(There may be better or faster DNS numbers in your area, but these should be a good test).
Click OK.

Spam Email Server Account Hijacked

Hello everyone,
I've been having a lot of trouble with one particular email server. I've posted a couple of questions but nobody has answered me so I went and re-installed the whole server by changing it's static IP and adding an Airport Extreme in between so that the server only does DNS, Open Directory, File Sharing and Email.
Everything it's been going well until one user started receiving email notifications about mail returned messages.
I've tried several things:
- Removed the non SSL website so I only left the Webmail on 443
- Changed to more secure passwords
- Lock the account after 10 bad passwords (the user gets blocked every couple of hours)
- Deactivate the POP protocol as nobody is using it, we are only using
- Tried blocking some Russian IPs because I noticed that all the emails are Reply To the domain ngs.ru but from the logs it looks like it's going through locally.
My user has only Macs and iOS products so even though it's a mixed environment I don't think there could be a Malware doing this.
I don't know what else can I do, I really want to avoid the server getting blacklisted and I've been looking for help so I would really appreciate if someone can provide me some guidance.
Here's the postconf -n:
server:~ administrator$ sudo postconf -n
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
enable_server_options = yes
header_checks = pcre:/etc/postfix/custom_header_checks
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailbox_size_limit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains =
message_size_limit = 0
mydestination = $myhostname, localhost.$mydomain, localhost, ecogenia.ca, server.ecogenia.ca, localhost.localdomain, $mydomain
mydomain = ecogenia.ca
mydomain_fallback = localhost
mynetworks = 127.0.0.0/8,192.168.1.0/24,207.115.108.190
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpd_client_restrictions = hash:/etc/postfix/smtpdreject cidr:/etc/postfix/smtpdreject.cidr permit_mynetworks permit_sasl_authenticated reject_rbl_client zen.spamhaus.org permit
smtpd_enforce_tls = no
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_sasl_authenticated permit_mynetworks reject_invalid_helo_hostname reject_non_fqdn_helo_hostname
smtpd_pw_server_security_options = cram-md5,gssapi,login,plain
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination check_policy_service unix:private/policy permit
smtpd_sasl_auth_enable = yes
smtpd_tls_CAfile = /etc/certificates/server.ecogenia.ca.B9BEBCFA9A643188A6A20932B602BC15FBEB0C4F.c hain.pem
smtpd_tls_cert_file = /etc/certificates/server.ecogenia.ca.B9BEBCFA9A643188A6A20932B602BC15FBEB0C4F.c ert.pem
smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL
smtpd_tls_key_file = /etc/certificates/server.ecogenia.ca.B9BEBCFA9A643188A6A20932B602BC15FBEB0C4F.k ey.pem
smtpd_use_pw_server = yes
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
virtual_alias_domains = $virtual_alias_maps hash:/etc/postfix/virtual_domains
virtual_alias_maps = hash:/etc/postfix/virtual_users
These are some of the logs I've been seeing:
Dec 4 04:06:51 server postfix/smtpd[19291]: NOQUEUE: reject: RCPT from unknown[95.65.176.14]: 554 5.7.1 Service unavailable; Client host [95.65.176.14] blocked using zen.spamhaus.org; http://www.spamhaus.org/query/bl?ip=95.65.176.14; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[95.65.176.14]>
Dec 4 04:08:54 server postfix/smtp[19353]: 7897321698B: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=21, delays=10/0/0/10, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=17722-02, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as F0C1121699B)
Dec 4 05:08:14 server postfix/smtp[21213]: 43A6E216C47: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=11/0.02/0/5.8, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=17722-03, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as A6914216C55)
Dec 4 05:16:28 server postfix/smtp[21479]: 6A7D8216CB8: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=11/0.02/0.01/5.6, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=17723-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as B435E216CC4)
Here is an example of the emails returned that the user has never sent:
From: "Mail Delivery System" <[email protected]>
Subject: Undelivered Mail Returned to Sender
Date: 3 December, 2012 1:08:42 PM EST
To: [email protected]
Nous sommes desoles de vous informer que votre message n a pas
pu etre remis a un ou plusieurs de ses destinataires.
Ceci est un message automatique genere par le serveur mwinf5d38.orange.fr.
Merci de ne pas y repondre. This is the mail system at host mwinf5d38.orange.fr.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. The mail system <[email protected]>: host mail.ru[94.100.176.20] said: 550
spam message discarded. Please visit http://mail.ru/notspam/abuse?c=dK3Cqtwc2M_u_NHfPpZdr5kaLTUE1R6jDAAAAPoyAAATz4o6 or report details to [email protected]. Error code: AAC2AD74CFD81CDCDFD1FCEEAF5D963E352D1A99A31ED504. ID: 0000000C000032FA3A8ACF13.
From: Вера Краснова <[email protected]>
Subject: Кредит под конец года каждому, успевайте оставить заявку на кредит в декабре.
Date: 3 December, 2012 12:59:23 PM EST
To: Дина <[email protected]>
Reply-To: Вера Краснова <[email protected]>
Доброе время суток, в четвертом квартале 2012 года Вы проявляли интерес к нашим кредитным программам, сообщаем Вам, что Ваша заявка получила одобрение от службы безопасности нескольких банков и мы просим заполнить заявку на кредит на сайтеhttp://renessanscapital.ru/
С уважением, Вера Краснова
т. +7 (913) 574-24-76
skype: credit.skype
ICQ: 6573118
Внимание! Для того, чтобы отписаться от рассылки нужно один раз отправить заявку на получение кредита на странице http://renessanscapital.ru/ после чего на Ваш e-mail больше не будут отправляться письма.
I'll really appreciate anyone's help.

I've been getting a lot of bounce backs from the same SMTP server as you to our email domain as well.
The offending server mwinf5d55.orange.fr is sending "backscatter" spam which should be simply dropped by them instead of bouncing back to the "FROM" address.
Because of this problem of bounced emails, I've tweaked our SPF (Sender Policy Framework) DNS TXT entry for our email domain to help receiving mailservers know what our legitimate OUTBOUND smtp mail servers actually are. This should allow correctly configured email servers to drop any email from mwinf5d55.orange.fr because it is not a valid source of email for our domain.
(See http://www.openspf.org/SPF_Record_Syntax for some syntax)
Some details that I've dug up:
The SMTP server at orange.fr is accepting mail based on forged FROM: addresses which bounce back to you by the receiving target TO: address mailservers.
Eg. From your email bounce back message: host mail.ru[94.100.176.20] said: 550 spam message discarded.
I'm not sure if the spammer is using the mwinf5d55.orange.fr smtp server as an open relay or if it's using someone else's smtp username and password to send mail.
If you look at the email headers of the original bounced (spam) email that caused the backscatter it shows for example (from one of our bounces that I've received):
Received: from Unknown ([92.46.248.56])
by mwinf5d55 with ME
id 7XfA1l00l1Dkwus03XfJsw; Mon, 04 Mar 2013 20:39:43 +0100
X-ME-IP: 92.46.248.56
X-ME-Entity: ofr
When you look up the IP address source of that email it shows that it is coming from "JSC Kazakhtelecom, West Kazakhstan Affiliate".
http://en.utrace.de/whois/92.46.248.56
If you lookup the original source email and find that it's from your original user's computer then you have a problem. If it's from a compromised machine overseas that's sending forged spam on your user's behalf, then there's not too much you can do about it short of publishing a correct SPF record.
Hope that helps.

Unable to define Spam emails!

Similar Messages

Maybe you are looking for