Alessandro Vesely <[EMAIL PROTECTED]> wrote: > once again someone choose my e-mail as the sender > for tons of spam. What I've never seen before is > that the original messages contained in failure > reports show the following > > 1. every message comes from a different IP. Often > those IPs are in MAPS dul list. I didn't find any > of them with an active SMTP port. > > 2. the user name of the return path is always > different too. (I only get those message that have > my domain name, as a last bounce to postmaster.) > > 3. the X-Mailer header (and style of formatting) is also changing > frequently. > > It looks like all those message come from different PCs > coordinated by someone who "owns" them. Is it possible that they are so > many?
It's probably the PALYH or the Sobig worm which is spreading through insecure client software and speaks SMTP directly. Julian. ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
