Richard Pitt wrote: > Congratulations - you are the victim of a "joe job" where the spammers > use your address as the "sending" and "reply to" address. > > I have one such address that gets between 15,000 and 25,000 "replies" > per day and has for over 2 years that I can track. ([email protected] > which has never been used by the owner of that domain) > > In severe cases (such as the above) only a change in your address will > stop the flood. Most however will tail off after a few days or weeks. My > own address has suffered a couple of times but seems to be fine at this > time. > > For the above joe job I have a special error message crafted to send to > reply hosts after the envelope but before the body. Most severe case > I've ever run across - anyone able to top it? > > richard > > Hi Richard spamassasin is now catching it since i removed my self from the whitelist cant beleave I did that
2008-12-21 18:22:57 1LESx5-0009ne-I2 <= [email protected] H=(62-30-39-110.cable.ubr02.wiga.blueyonder.co.uk) [62.30.39.110]:4254 I=[217.112.92.232]:25 P=esmtp S=3619 T="Hi, my lost love )" from <[email protected]> for [email protected] 2008-12-21 18:22:57 1LESx5-0009ne-I2 => :blackhole: <[email protected]> R=ditch_spam 2008-12-21 18:22:57 1LESx5-0009ne-I2 Completed QT=2s -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
