Prev: MacScan
Next: Text to mp3 conversion
From: Duncan Kennedy on 24 May 2010 17:22
Tim Streater <timstreater(a)waitrose.com> wrote:

> Seems that http://www.spamhaus.org got the impression today that my OS X
> running Mini was infected with the rustock spambot, so I got blacklisted
> by one of my ISPs until I was able to clear it at spamhaus.
>
> Anyone any idea what that's all about?

Are there only Macs on your network?

It may be "genuine", in wich case it is probably a false positive
unless somebody has found a way to infect a Mac with a bot. I doubt
this, personally.

Or it could be a simple spam itself, in which case the underlying link
to the URL would be to soewhere it shouldn't, trying to infect your
computer - they don't necessarily identify the OS when these are sent
out. This one is quite likely if you hadn't been able to clear your
problem at the right address.

The third thing I have seen is this sort of thing sent out when an ISP
has a client with an open mail relay. Demon had a lot of trouble once,
some years ago, with Orb because they had a new client who installed
mail server software wrongly and Orb sent a warning to a Demon server
that didn't accept incoming mails. Orb then blocked all Demon
subscribers. This sort of thing currently effects contact with a member
of a group I correspond with based in the US - his ISP uses RoadRunner
which uses some kind of checking message to senders' server addresses
and times out contacting one of the other members' ISPs, resulting in a
block. In the circumstances something like hat seems the most likely.

Of course if you have Windows boxes one might be infected and sending
spam but that is probably statistically unlikely.



--
duncank
 | 
Pages: 1
Prev: MacScan
Next: Text to mp3 conversion