Looks more like the From address is either listed in your kill file
or they are sending NUL sender and you are setting your SMTP
to refuse NUL sender.  The latter I would not advise as most MTA's
will send bounce messages with a NUL From envelope.
 
Dusty
----- Original Message -----
Sent: Tuesday, July 27, 1999 2:41 PM
Subject: [IMail Forum] Possible SPAM relay attempt?

Hi,
 
I'm not an expert in mail protocols, but I think it might be an attempt to use my SMTP server as relay for SPAM (the suspect IP/domain belongs to a small computer store).
My SMTP is configured to relay only for my addresses, and to "refuse NULL senders" (as you can see below).
 
(...)
07:26 20:03 SMTPD(008700F6) [(my server)] connect XXX.XXX.XXX.XXX port 1993
07:26 20:03 SMTPD(008700F6) [XXX.XXX.XXX.XXX] EHLO suspect-domain.com.br
07:26 20:03 SMTPD(008700F6) [XXX.XXX.XXX.XXX] bogus address in MAIL FROM:<>
07:26 20:03 SMTPD(008800F6) [(my server)] connect XXX.XXX.XXX.XXX port 2024
07:26 20:03 SMTPD(008800F6) [XXX.XXX.XXX.XXX] EHLO suspect-domain.com.br
07:26 20:03 SMTPD(008800F6) [XXX.XXX.XXX.XXX] bogus address in MAIL FROM:<>
(...)
 
Before I contact the suspect-domain administrator, could you please tell me if it is really a SPAM-relay attempt?
 
Cheers,
Ricardo Freire, MCP

Reply via email to