You should be able to track this. Are you on CF7?
"This e-mail is from Reed Exhibitions (Oriel House, 26 The Quadrant, Richmond, Surrey, TW9 1DL, United Kingdom), a division of Reed Business, Registered in England, Number 678540. It contains information which is confidential and may also be privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s) please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you have received this communication in error please return it to the sender or call our switchboard on +44 (0) 20 89107910. The opinions expressed within this communication are not necessarily those expressed by Reed Exhibitions." Visit our website at http://www.reedexpo.com -----Original Message----- From: Steve Nguyen - Anumina.com <[EMAIL PROTECTED]> To: CF-Server <[email protected]> Sent: Thu Mar 16 05:52:52 2006 Subject: RE: CFMAIL Abuse I can see the emails being sent in the mailsent log file. Also, the mail server is becoming blacklisted too. -----Original Message----- From: Jim McAtee [mailto:[EMAIL PROTECTED] Sent: Thursday, March 16, 2006 12:38 AM To: CF-Server Subject: Re: CFMAIL Abuse How do you know this is happening? Have you recieved complaints from people being spammed, or do you see a large volume of mail going through your outgoing SMTP server? ----- Original Message ----- From: "Steve Nguyen" <[EMAIL PROTECTED]> To: "CF-Server" <[email protected]> Sent: Wednesday, March 15, 2006 10:01 AM Subject: CFMAIL Abuse > NOTE: Sorry, i had posted this earlier to the wrong forum =( > > We are experiencing a problem with a spammer using CFMAIL to send out > spam. I don't know if it's a direct customer or someone using email > injection on a customer's site. The mail logs only show when, who, where > and what was emailed, but I need to figure out who's scripts are being > run that is doing this. The CF logs don't help. Is there a way to find > out who's abusing the cfmail tag? The only thing I can do is add > filters on the mail server to prevent the email from going through, but > the spammer just keeps changing his domain name and content. Any ideas > on how to fight this? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Message: http://www.houseoffusion.com/lists.cfm/link=i:10:5882 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/10 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:10 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.10 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
