Hi,
 
I'm not an expert in mail protocols, but I think it might be an attempt to use my SMTP server as relay for SPAM (the suspect IP/domain belongs to a small computer store).
My SMTP is configured to relay only for my addresses, and to "refuse NULL senders" (as you can see below).
 
(...)
07:26 20:03 SMTPD(008700F6) [(my server)] connect XXX.XXX.XXX.XXX port 1993
07:26 20:03 SMTPD(008700F6) [XXX.XXX.XXX.XXX] EHLO suspect-domain.com.br
07:26 20:03 SMTPD(008700F6) [XXX.XXX.XXX.XXX] bogus address in MAIL FROM:<>
07:26 20:03 SMTPD(008800F6) [(my server)] connect XXX.XXX.XXX.XXX port 2024
07:26 20:03 SMTPD(008800F6) [XXX.XXX.XXX.XXX] EHLO suspect-domain.com.br
07:26 20:03 SMTPD(008800F6) [XXX.XXX.XXX.XXX] bogus address in MAIL FROM:<>
(...)
 
Before I contact the suspect-domain administrator, could you please tell me if it is really a SPAM-relay attempt?
 
Cheers,
Ricardo Freire, MCP

Reply via email to