~~~~~~~~~~~~ IMPORTANT INFORMATION -- Please read! ~~~~~~~~~~~~

1. The "search..." box above searches the Docs & Forum Posts. The "Search" tab above just searches the Forum Posts. :side:
Please use these to search for your issue *before* creating a new message topic, as your issue may have been previously solved.
2. Please put your Club # and Club Web Address in your Forum Signature (best) OR in each post to get faster support from us.
Click here to edit your signature at the bottom of the Profile Information tab.
3. Our user and admin docs are available at: support.toastmastersclubs.org/doc "There's a doc for that!" ;)
4. There is an "Opt In" Feature for newly added members. The Opt In document explains the [strike]strikethrough[/strike] member information. Click Here to View the Post
5. When posting a New Topic , please include all relevant details and be specific. When did your issue 1st occur? What operating system, browser, & browser version are you using? Did you refresh your browser cache? Are your cookies enabled? Lastly, a screen shot is often helpful.
6. Please abide by the Terms of Use . We are volunteers contributing our spare time. We are happy to assist you, so long as you are respectful and courteous.
7. We are always looking for new FreeToastHost Ambassadors to join our team and support fellow Toastmasters in their use of the FreeToastHost website system. If you are familiar with the system and have some interest, send a Send Us a Private Message.

Sudden spam problem

More
6 years 1 month ago #75203 by kerint
Replied by kerint on topic Sudden spam problem
OH right I forgot you requested code formatting. I pulled headers from 3 others if you want to compare. Here's one. I thought it might be toward the bottom of this where it says Received: from glidewife.icu ([70.96.202.4]). Could that be it?
Code:
Received: from BN3NAM01HT181.eop-nam01.prod.protection.outlook.com (2603:10b6:5:177::22) by DM5PR0101MB2988.prod.exchangelabs.com with HTTPS via DM6PR02CA0045.NAMPRD02.PROD.OUTLOOK.COM; Wed, 29 May 2019 21:40:04 +0000 Received: from BN3NAM01FT048.eop-nam01.prod.protection.outlook.com (10.152.66.54) by BN3NAM01HT181.eop-nam01.prod.protection.outlook.com (10.152.67.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1922.16; Wed, 29 May 2019 21:40:03 +0000 Authentication-Results: spf=pass (sender IP is 50.19.253.65) smtp.mailfrom=toastmastersclubs.org; outlook.com; dkim=fail (body hash did not verify) header.d=toastmastersclubs.org;outlook.com; dmarc=pass action=none header.from=toastmastersclubs.org; Received-SPF: Pass (protection.outlook.com: domain of toastmastersclubs.org designates 50.19.253.65 as permitted sender) receiver=protection.outlook.com; client-ip=50.19.253.65; helo=toastmastersclubs.org; Received: from toastmastersclubs.org (50.19.253.65) by BN3NAM01FT048.mail.protection.outlook.com (10.152.66.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1922.16 via Frontend Transport; Wed, 29 May 2019 21:40:03 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:57306BA8721987974A141438AC97F385498270C1E926E1FA00EDCB466D4B064A;UpperCasedChecksum:62AD6308B8BF864717AF9F6F368AFBB4BE55D7993072179A8F5741CE91E72D12;SizeAsReceived:2008;Count:19 Received: from localhost.localdomain (toastmastersclubs.org [127.0.0.1]) by toastmastersclubs.org (8.14.4/8.14.4) with ESMTP id x4TLe3bB028775 for <KERIN'S EMAIL@ outlook.com>; Wed, 29 May 2019 21:40:03 GMT Message-ID: <201905292140.x4TLe3bB028775@toastmastersclubs.org> Received: from glidewife.icu ([70.96.202.4]) by toastmastersclubs.org (8.14.4/8.14.4) with ESMTP id x4TLdwHE028723 for <OUR CONTACT US EMAIL@ toastmastersclubs.org>; Wed, 29 May 2019 21:40:01 GMT DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail; d=glidewife.icu; b=je9QNLT5JGlXLjAfqLwbyTETfffwGz2ysGPRkol8kL30ZtjomEfH67OlNzhBp/bMudo1NG/Z8sD1 NW5rvSchBSPVpanjpmi6RpbegkOfPxQoQAAgSIp1PD0P94NOjsP+TDJRx/zKT4dK/9apiiUdIYIb YZJnQHLRxT/1GZPRgZ0=; Date: Wed, 29 May 2019 16:32:52 -0500
The topic has been locked.
More
6 years 1 month ago - 6 years 1 month ago #75207 by SteveTheTechie
Replied by SteveTheTechie on topic Sudden spam problem
I think you are probably correct. Brian can add a block for a range of IP addresses in the FTH server firewall config.

(Hoping Brian chimes in here.)
Last edit: 6 years 1 month ago by SteveTheTechie.
The topic has been locked.
More
6 years 1 month ago #75211 by Brian
Replied by Brian on topic Sudden spam problem
Originating IP are

Received: from steamjury.icu ([70.96.202.5])

Received: from glidewife.icu ([70.96.202.4])

They have been blocked
The following user(s) said Thank You: SteveTheTechie, kerint
The topic has been locked.
More
6 years 1 month ago #75335 by kerint
Replied by kerint on topic Sudden spam problem
Thank you both so much for your help with this issue, and for all you do. And thank you for teaching me how to find th originating IP! I hate to jinx anything, but the problem seems to have subsided. Nothing new since you blocked these. Fingers crossed! Have a great day!

Kerin
The following user(s) said Thank You: SteveTheTechie
The topic has been locked.
Time to create page: 0.133 seconds