View Full Version : Spam from within the server to server issue
Dr-Host
05-06-2007, 12:17 AM
Hi guys,
I have a very weird problems some of the spam that is coming to my server seems to be generated from within the server
ie:
From: Jacob [mailto:f@clientdomain.com]
Sent: Friday, May 04, 2007 20:31
To: arik@clientdomain.com
I can't get message headers since its not coming to me.
my question is is there a way to block mail from fake domains that are hosted on my server if its being sent to my server?
Thanks,
David
floyd
05-06-2007, 06:01 AM
You can always get the headers. What you have provided does not tell us anything about the source. The only thing we know is that somebody set the From address to your domain. Anybody can do that using any email server or client.
is there a way to block mail from fake domains
How are you going to determine if it is fake or not?
Dr-Host
05-07-2007, 04:32 AM
By fake domains I ment checking to see if the email address of the sender exists if this is a domain that I'm hosting
and I don't know how to do it I'm here to get help on this issue
Dr-Host
05-08-2007, 01:16 AM
Here are the message headers:
Return-path: <hcibwsc@medicnrg.com>
Envelope-to: arik@medicnrg.com
Delivery-date: Mon, 07 May 2007 19:22:50 +0300
Received: from mail by server.dr-host.co.il with spam-scanned (Exim 4.50)
id 1Hl5z5-0002Yx-Or
for arik@medicnrg.com; Mon, 07 May 2007 19:22:50 +0300
Received: from 125-225-15-144.dynamic.hinet.net ([125.225.15.144])
by server.dr-host.co.il with smtp (Exim 4.50)
id 1Hl5z4-0005m9-Rn
for arik@medicnrg.com; Mon, 07 May 2007 19:22:47 +0300
X-Original-To: arik@medicnrg.com
Delivered-To: arik@medicnrg.com
Received: from [125.225.15.144] (port=46636
helo=125-225-15-144.dynamic.hinet.net)
by mail.medicnrg.com with esmtp
id 604548-604548-20
for arik@medicnrg.com; Tue, 08 May 2007 00:23:42 +0800 (EET)
Message-ID: <10c501c79107$01c79107$900fe17d@medicnrg.com>
From: "Trenton" <hcibwsc@medicnrg.com>
To: "Viola" <arik@medicnrg.com>
Subject: enclave less mongoose
Date: Tue, 08 May 2007 00:23:42 +0800 (EET)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_10C3_01C790C4.1388A320"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3028
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
DirectAdmin Support
05-08-2007, 02:29 PM
If you want to ensure the sender is valid and present, do the *opposite* of this guide:
http://help.directadmin.com/item.php?id=59
John
Powered by vBulletin™ Version 4.0.4 Copyright © 2012 vBulletin Solutions, Inc. All rights reserved.