Spam - Smtp

[DRKT]

Hi!

for the last couple of days ive been receiving these sorts of emails. im not sure why. im wondering if after installing the IMAP server, it didnt somehow open up my SMTP to the world..how can i make sure that SMTP is only used locally, or at least with authentication?

ex:

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

Reporting-MTA: dns; mail46-red-R.bigfish.com
Arrival-Date: Thu, 10 Jun 2004 21:34:47 +0000 (UCT)

Final-Recipient: rfc822; 0hya008uooezld@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hya008uooezld@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hya00fq3oexy3@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hya00fq3oexy3@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyc003ciievsm@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyc003ciievsm@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyc00e4kih2fh@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyc00e4kih2fh@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyf005ejqauun@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyf005ejqauun@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyf00fjptbybz@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyf00fjptbybz@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyf00n6rtby1b@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyf00n6rtby1b@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyf00npeqau1e@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyf00npeqau1e@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyg006jq9fvqj@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyg006jq9fvqj@bluemountain.com>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; 0hyg00ajg9ic8j@bluemountain.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<0hyg00ajg9ic8j@bluemountain.com>... User unknown (in reply to RCPT TO
command)

.....


other:

Reporting-MTA: dns;ncrmx07.tc.gc.ca
Received-From-MTA: dns;ncrmx42.tc.gc.ca
Arrival-Date: Thu, 10 Jun 2004 15:19:24 -0400

Final-Recipient: rfc822;mariocoutu@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;nanouk_mj@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;mldemers@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;linewhittom@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;3Dclamarre@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;clamarre@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;3Dcoutualain@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;3Dcgauthier@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;cgauthier@tc.gc.ca
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;3Dyolpat@tc.gc.ca
Action: failed
Status: 5.1.1

.....

:(

[nobaloney]

When you get these emails you should check through /var/log/exim/mainlog to see if your system actually tried to send emails to these address at bluemountain.com.

If so, then you may have a spammer using your system.

If not, then you're being spoofed and bluemountain.com doesn't realize it.

Jeff