Hi all,
I build email server using qmailtoaster, recently I found fake email using my domain which is the account is fake too.
we have 2 mail server in here using 2 diferent domain : 1. wireless.co.id using microsoft and the other using qmail with domain wirelessindonesia.net.
this is the header...
Microsoft Mail Internet Headers Version 2.0
Received: from jaya.wireless.co.id ([202.70.52.8]) by salak.wireless.co.id with Microsoft SMTPSVC(6.0.3790.211);
Mon, 20 Feb 2006 21:36:57 +0700
Received: from mail.wirelessindonesia.net ([202.70.60.50]) by jaya.wireless.co.id with Microsoft SMTPSVC(6.0.3790.1830);
Mon, 20 Feb 2006 21:36:56 +0700
Received: (qmail 30908 invoked by uid 89); 20 Feb 2006 15:56:01 -0000
Date: 20 Feb 2006 15:56:01 -0000
Message-ID: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 30898 invoked by uid 89); 20 Feb 2006 15:55:58 -0000
Received: from unknown (HELO 25DF3FA8) (203.81.198.137)
by 3g with SMTP; 20 Feb 2006 15:55:58 -0000
Received-SPF: none (3g: domain at wirelessindonesia.net does not designate permitted sender hosts)
Received: from phayze.com (unknown [59.40.33.120])
by punkass.com with SMTP id Z6YSLKBA89
for <[EMAIL PROTECTED]>; Mon, 20 Feb 2006 08:42:03 -0600
Received: from allsaintsfan.com (benton.allsaintsfan.com [36.16.136.132])
by tppa.com with SMTP id NZGKFCCSJO
for <[EMAIL PROTECTED]>; Mon, 20 Feb 2006 15:40:03 +0100
X-Originating-IP: 82.101.186.116
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: "Uucp" <[EMAIL PROTECTED]>
Subject: [EMAIL PROTECTED]
X-Originating-IP: 82.101.186.116
User-Agent: Internet Mail Service (5.5.2650.21)
X-Mailer: Internet Mail Service (5.5.2650.21)
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 20 Feb 2006 14:36:56.0906 (UTC) FILETIME=[19AF72A0:01C6362B]
Received: from jaya.wireless.co.id ([202.70.52.8]) by salak.wireless.co.id with Microsoft SMTPSVC(6.0.3790.211);
Mon, 20 Feb 2006 21:36:57 +0700
Received: from mail.wirelessindonesia.net ([202.70.60.50]) by jaya.wireless.co.id with Microsoft SMTPSVC(6.0.3790.1830);
Mon, 20 Feb 2006 21:36:56 +0700
Received: (qmail 30908 invoked by uid 89); 20 Feb 2006 15:56:01 -0000
Date: 20 Feb 2006 15:56:01 -0000
Message-ID: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 30898 invoked by uid 89); 20 Feb 2006 15:55:58 -0000
Received: from unknown (HELO 25DF3FA8) (203.81.198.137)
by 3g with SMTP; 20 Feb 2006 15:55:58 -0000
Received-SPF: none (3g: domain at wirelessindonesia.net does not designate permitted sender hosts)
Received: from phayze.com (unknown [59.40.33.120])
by punkass.com with SMTP id Z6YSLKBA89
for <[EMAIL PROTECTED]>; Mon, 20 Feb 2006 08:42:03 -0600
Received: from allsaintsfan.com (benton.allsaintsfan.com [36.16.136.132])
by tppa.com with SMTP id NZGKFCCSJO
for <[EMAIL PROTECTED]>; Mon, 20 Feb 2006 15:40:03 +0100
X-Originating-IP: 82.101.186.116
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: "Uucp" <[EMAIL PROTECTED]>
Subject: [EMAIL PROTECTED]
X-Originating-IP: 82.101.186.116
User-Agent: Internet Mail Service (5.5.2650.21)
X-Mailer: Internet Mail Service (5.5.2650.21)
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 20 Feb 2006 14:36:56.0906 (UTC) FILETIME=[19AF72A0:01C6362B]
could anyone
explain what happen ?? it's open relay or spoofing or what ?? what is the solution.
the other issue is when I did restart server IMAP and pop3-ssl doesn't work
[EMAIL PROTECTED] mail]# qmailctl stat
imap4: up (pid 22062) 1 seconds
imap4-ssl: up (pid 22072) 1 seconds
pop3: up (pid 1809) 3557 seconds
pop3-ssl: up (pid 22067) 1 seconds
send: up (pid 10865) 759 seconds
smtp: up (pid 10866) 759 seconds
spamd: up (pid 1804) 3557 seconds
imap4/log: up (pid 1805) 3557 seconds
imap4-ssl/log: up (pid 1824) 3557 seconds
pop3/log: up (pid 1808) 3557 seconds
pop3-ssl/log: up (pid 1812) 3557 seconds
send/log: up (pid 1815) 3557 seconds
smtp/log: up (pid 1807) 3557 seconds
spamd/log: up (pid 1810) 3557 seconds
[EMAIL PROTECTED] mail]#
imap4: up (pid 22062) 1 seconds
imap4-ssl: up (pid 22072) 1 seconds
pop3: up (pid 1809) 3557 seconds
pop3-ssl: up (pid 22067) 1 seconds
send: up (pid 10865) 759 seconds
smtp: up (pid 10866) 759 seconds
spamd: up (pid 1804) 3557 seconds
imap4/log: up (pid 1805) 3557 seconds
imap4-ssl/log: up (pid 1824) 3557 seconds
pop3/log: up (pid 1808) 3557 seconds
pop3-ssl/log: up (pid 1812) 3557 seconds
send/log: up (pid 1815) 3557 seconds
smtp/log: up (pid 1807) 3557 seconds
spamd/log: up (pid 1810) 3557 seconds
[EMAIL PROTECTED] mail]#
thanks for helping
budi
Yahoo! Autos. Looking for a sweet ride? Get pricing, reviews, & more on new and used cars.
