Email

Newegg continues to spam

On December 8th, 2010, the employee spammed in the last post and a new employee were sent unsolicited email (spam) by Newegg. So now that’s 3 email addresses, and while I was a customer of Newegg in the past, I have never used my work email address with them, and the other 2 people recently spammed have never been a customer of Newegg ever.

Both users received the exact same message (minus the user-identifiable link modifications).

The user who had been spammed before had been assured after calling them that he had been removed from their mailing list, but obviously that was a lie.

I can not see any reason to do business with Newegg.

Sure, prices seem to be good and there are many good reviews of their shipping and response to RMA issues, but at what cost?

Personally, I will never shop with Newegg again and I encourage anyone reading this to stop purchasing from such an abusive company. They aren’t Internet friendly and seem to feel that they have some kind of right to invade your mailbox, whether you have dealt with them in the past ornot.

Bad company is bad. Just saying.

Horse: dead, too bad Newegg spam isn’t yet :(

Newegg sends spam, can not learn from previous mistakes

I know that for many, Newegg is a great place to buy things.

I can no longer in good conscience recommend or advocate using NewEgg as a provider of your computing and electronic needs.

Let me step back a bit, back to August 18th, 2010 and August 30th, 2010 when I received unsolicited email (in this case, pure and outright spam) from Newegg. I had posted this on my personal blog (which doesn’t get much traffic/eyes overall) as I felt it was just a personal issue to deal with.

But today, out of nowhere, one of my employees received unsolicited email from Newegg and the best part? It is pedaling the same small 120GB disk drive that the messages I received in August, 2010!

I have an idea as to the avenue that Newegg is using to gather/borrow/steal/purchase new email addresses and I am not willing to post it publicly at this time, but I can say that salesforce.com is the owner of this breach of trust.  I do hope I am wrong as salesforce.com has a decent reputation. But then again, so did Newegg…

And without further adieu – the PDF of the headers…

20101118-newegg-spam

My personal view: I do not do business with companies that spam and will never do business with Newegg again after the initial round of spam. I’ll now be working internally to make sure that we, as a company, do not use Newegg ever again in the future and advocating to the employees that they boycott Newegg for future purchases as well.

Outbound Email Spam is teh suck

No mispelling, just playing ‘new internet lingo’ game.  Did I win?

Let’s get serious…

This week, multiple customer accounts were breached.  Starting approximately 3 weeks ago, a phish was sent out that some of our customers responded to, giving out their account information.

We looked through our mail logs and found the users who had been phished and we changed their passwords.

Along the way, we either missed some users who were phished, or another phish was done that we did not detect.

On Monday, 2 accounts that had been phished at some time were used to send spam through our outbound email servers.  By default, our outbound email servers require SASL authentication.  The abusers authenticated to our servers, and over the next couple of hours, we were thoroughly abused, and our servers started slowing down.  Not enough to trigger monitoring, though.  Kudos for performance tuning, spankings for not noticing this until a customer told us.

On Wednesday, we got hit again, by a single account this time, and 18,640 connections later, our servers were again getting exercised.

All this preamble, what is it for, Mike?

I’ll tell you – on Monday our outbound mail servers got onto some of the anti-spam lists, including Yahoo, Hotmail, Comcast.  We did what we could to remove the IPs of our servers from the lists, but Hotmail (in particular) has a 72 hour period for removal.  Ah well.  72 hours does suck, but it is survivable.

Then came Wednesday…and another account was abused, putting us back on those same lists we just got off of, and while still on the Hotmail list, our 72 hours got reset.  Oh that is frustrating.

More >

Virtualization and the ISP (part 1)

With things changing all over the marketplace, virtualization has, again, come to the forefront as the savior of the data center.

And wouldn’t you know, I’d like to save my data center, at least some power and cooling needs.

I have started to review how we use our servers and where we could do combining to save power, cooling, and rack space.  During this installment, I’ll be discussing the usage, and combining, of 3 parts of our network:

  • POP/IMAP servers
  • Apache based web servers
  • SMTP (inbound, delivery, outbound) servers

More >

Postfix and antispam

I had originally written this for my personal blog and reposting here with some updates.

Wow, there are a lot of bad documentation links out there on the interTRON.

For the $ayjob, I have been battling spam for quite some time and continue to look for new ways to put a stop to this abuse. The hard part? One persons spam is another persons legit email, it is so completely difficult to do something that makes everyone happy.

More >