Natalio Gatti wrote:
>
> On Wed, Jun 23, 2010 at 4:27 PM, Rafael Andrade
> <[email protected] <mailto:[email protected]>> wrote:
>
> My last msg, i will send a new thread
> qmHandle -l
>
> 2450210 (20, R)
> Return-path: [email protected]
> <mailto:[email protected]>
> From: Itau Informa Todos erros corrigidos
> <[email protected]
> <mailto:[email protected]>>
> To: [email protected] <mailto:[email protected]>
> Subject: Atualização do seu aparelho Itoken versão Final sem erros
> Date: 23 Jun 2010 17:56:45 -0000
> Size: 1785 bytes
>
>
> I had a similar problem. The best way to obtain information is to see
> the headers of the spam mail. You can see them with qmqtool or qmHandle.
> In that header you can see if the mails are using an authenticated
account.
Good idea, Natalio.
Rafael,
(In order to start a new thread, you need to choose 'write'. Choosing
'reply' continues the same thread.
It looks as though we had the wrote 'from' address before.
Once again, I would:
# qmlog -nl -g comunicacaodigi...@itau-unibanco smtp \
> | grep "CHKUSER accepted sender" | head -n10
This will show you the first 10 occurrences of messages that were
submitted with that address. You should see something like:
06-23 02:58:23 CHKUSER accepted sender: from
<[email protected]:??...@???????:> ...
The ??...@??????? part is the account name that was used to
authenticate. Change that password, and you should no longer get more
spam messages from this spammer.
If there's no account name in the message, then the message was
submitted with no authentication. We'll need to look again at your
tcp.smtp file if that's the case.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
