First thing would be to check your relaying settings... perhaps that IP
address has somehow made it into your acceptallmail, or your local
domains are not configured properly.

Have a look at the settings in the Validate Sender section as well.
Depending if you use DoNoValidLocalSender, or DoNoSpoofing (or perhaps
both), you may want to increase your scoring, or just block them.

In my setup, my primary MTA is exchange, so I know that any message from
my local domains come from a very specific place. If you have users
connecting from a larger range of IPs or largely different subnets, you
may want to set up SMTP AUTH on another port.

Don Brooks

-----Original Message-----
From: William Stucke [mailto:[email protected]] 
Sent: August-27-09 7:54 AM
To: ASSP Users
Subject: [Assp-user] Spammer sending mail as Local User

Hi guys,

Long time no talk!

I have found a whole bunch of entries looking like this in my ASSP log 
file: -

Aug-26-09 17:16:16 99751-01844 [Local] 74.94.71.134 
<[email protected]> to: [email protected] local [Re configure your

outlook email address] -> *c:\assp/notspam/1844.eml*

In addition, there were a number of messages in my MTA queue. I have 
deleted those, and added the offending IP address to the 
denySMTPConnectionsFrom list.

The question is, how did he manage to send mail in the first place?

The sending IP address is in the ComCast network, all addressees that I 
saw were at ComCast, all messages were from a random address at 
microsoft.com - none of which qualifies the sender as being "Local".

ASSP Version 
<http://www.magicvillage.de/%7EFritz_Borgstedt/assp/S06660E7E?WasRead=1>
: 
1.5.1.1(1.0.04), 
<http://www.magicvillage.de/%7EFritz_Borgstedt/assp/S06660E7E?WasRead=1>

running on Windows 2000 Server

Kind regards,

William Stucke


------------------------------------------------------------------------
------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008
30-Day 
trial. Simplify your report design, integration and deployment - and
focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to