If you used Postfix you could block:
the IP address where it came from,
the subject: Agressive home loan lenders.,
and the from e-mail address: [EMAIL PROTECTED]
Postfix would prevent open relay problems, and you could use the Postfix
server to relay/filter all incoming and outgoing mail. Postfix is free, and
the OS Linux is also free, but to make it easy installing Postfix under
Redhat 7.1 makes it really easy, and Redhat 7.1 has a built-in firewall. I
have a site I'm constructing at www.postfixgate.com, but I've been busy so
it isn't done yet.
----- Original Message -----
From: "Matt Hirsch" <[EMAIL PROTECTED]>
To: "Imail Forum (E-mail)" <[EMAIL PROTECTED]>
Sent: Tuesday, June 12, 2001 8:01 PM
Subject: [IMail Forum] Spammers...Argh
> Hello,
>
> I have been using Imail Version 5 for over 2 years (small business with
our
> own servers) and recently started having SPAM problems. I have noticed
that
> my server is being exploited using "X-RCPT-TO". The addresses being used
> are alias' that we utilize in our business. Check out the message header
> I've attached.
>
> What is X-RCPT-TO? Should this be possible on Imail? How can I secure
my
> server against this? I have received one message from Earthlink that my
> machine is a possible spamming machine and that my server is on there
black
> list for relay. What's the impact of that? I also noticed that even
> Ipswitch uses X-RCPT-TO. I noticed this when I changed out of digest mode
> (see below).
>
> Please email me directly. I don't believe switching from digest mode
took.
>
> Thanks in advance for any assistance.
>
> Matt Hirsch
>
> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> My email header:
>
>
> Received: from ABIES.ABIES.FR [195.101.203.161] by hirscharchitects.com
with
> ESMTP
> (SMTPD32-5.05) id AA3520F02D8; Sun, 10 Jun 2001 17:44:21 -0400
> Received: from 205.185.22.194 ([205.185.22.194]) by ABIES.ABIES.FR with
> Microsoft SMTPSVC(5.0.2195.1600);
> Sun, 10 Jun 2001 23:32:20 +0200
> Message-ID: <000046c93e3a$00004ae6$0000347e@>
> To: <Undisclosed Recipients>
> From: [EMAIL PROTECTED]
> Subject: Agressive home loan lenders.
> Date: Sun, 10 Jun 2001 18:22:23 -0400
> MIME-Version: 1.0
> Content-Type: text/plain;
> charset="Windows-1252"
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> Return-Path: [EMAIL PROTECTED]
> X-OriginalArrivalTime: 10 Jun 2001 21:32:24.0608 (UTC)
> FILETIME=[D6E5EA00:01C0F1F4]
> X-RCPT-TO: <[EMAIL PROTECTED]>
> X-UIDL: 280020707
> Status: U
>
>
> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> The header from Imail:
>
>
> Received: from list.ipswitch.com [156.21.1.21] by hirschtech.com with
ESMTP
> (SMTPD32-5.05) id A1B481902A0; Tue, 12 Jun 2001 20:20:04 -0400
> Date: Tue, 12 Jun 2001 20:37:43 -0400
> Message-Id: <[EMAIL PROTECTED]>
> From: [EMAIL PROTECTED] (IMail_Forum)
> To: [EMAIL PROTECTED]
> Subject: Unsuccessful Set Mode Command
> X-RCPT-TO: <[EMAIL PROTECTED]>
> X-UIDL: 280020812
> Status: U
>
> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
