Recently a stream of messages has been arriving to a site I host
apparently from the webmaster of the site, however its really from a
spammer/virus each message has a virus attached.

What can I do to reject messages that appear to be from an account that
they are not from.

Im not an expert on james i.e. I managed to install it a year ago and
havent touched it since, (which shows how good it is) so please dont
assume I know about maillets or processors (appart from the names).


Also Im not sure it its related but I also received this message

Return-Path: <[EMAIL PROTECTED]>
Received: from 62.29.80.104 ([62.29.80.104]) by hazlo.hazlorealidad.com
        (JAMES SMTP Server 2.2.0) with SMTP ID 734 for
<[EMAIL PROTECTED]>;
        Wed, 12 Apr 2006 02:00:05 -0500 (COT)
The following error occurred: <P>
Date: Wed, 12 Apr 2006 02:00:05 -0500 (COT)
From: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0
Message-ID:
<[EMAIL PROTECTED]>
X-Evolution-Source: pop://[EMAIL PROTECTED]
Subject: No Subject




Thanks in advance

Andy Bailey
 

Excerpt of message

De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Enviado el: Martes, 04 de Abril de 2006 05:04 p.m.
Para: [EMAIL PROTECTED]
Asunto: Your password has been successfully updated



Dear user suempresa, 
....




03/02/06 17:14:27 DEBUG smtpserver: Calling start()
03/02/06 17:14:27 DEBUG smtpserver: Watchdog default Worker #10 has time
to sleep 360000
03/02/06 17:14:27 DEBUG smtpserver: Command received: HELO 58F2A7E8
03/02/06 17:14:27 DEBUG smtpserver: Sent: 250-hazlo.hazlorealidad.com
Hello 58F2A7E8 (210.113.158.55 [210.113.158.55])
03/02/06 17:14:27 DEBUG smtpserver: Sent: 250-AUTH LOGIN PLAIN
03/02/06 17:14:27 DEBUG smtpserver: Sent: 250 AUTH=LOGIN PLAIN
03/02/06 17:14:27 DEBUG smtpserver: Calling reset() default Worker #10
03/02/06 17:14:28 DEBUG smtpserver: Command received: MAIL FROM:
<[EMAIL PROTECTED]>
03/02/06 17:14:28 DEBUG smtpserver: Sent: 250 Sender
<[EMAIL PROTECTED]> OK
03/02/06 17:14:28 DEBUG smtpserver: Calling reset() default Worker #10
03/02/06 17:14:28 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
03/02/06 17:14:28 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
03/02/06 17:14:28 DEBUG smtpserver: Calling reset() default Worker #10
....


11/04/06 12:24:51 DEBUG smtpserver: Calling start()
11/04/06 12:24:51 DEBUG smtpserver: Watchdog default Worker #12 has time
to sleep 360000
11/04/06 12:24:53 DEBUG smtpserver: Command received: HELO RSTN-SERVER
11/04/06 12:24:53 DEBUG smtpserver: Sent: 250-hazlo.hazlorealidad.com
Hello RSTN-SERVER (218.188.19.28 [218.188.19.28])
11/04/06 12:24:53 DEBUG smtpserver: Sent: 250-AUTH LOGIN PLAIN
11/04/06 12:24:53 DEBUG smtpserver: Sent: 250 AUTH=LOGIN PLAIN
11/04/06 12:24:53 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:24:55 DEBUG smtpserver: Command received: MAIL FROM:
<[EMAIL PROTECTED]>
11/04/06 12:24:55 DEBUG smtpserver: Sent: 250 Sender
<[EMAIL PROTECTED]> OK
11/04/06 12:24:55 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:24:57 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
11/04/06 12:24:57 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
11/04/06 12:24:57 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:24:59 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
11/04/06 12:24:59 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
11/04/06 12:24:59 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:25:03 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
11/04/06 12:25:03 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
11/04/06 12:25:03 DEBUG smtpse...


Extract from config file


    <servernames autodetect="false" autodetectIP="true">
<!-- CONFIRM? -->
         <servername>hazlorealidad.com</servername>
         <servername>hazlo.hazlorealidad.com</servername>
         <servername>globalfastmoney.com</servername>
         <servername>piramidesasesores.com</servername>
         <servername>globalredes.com</servername>
         <servername>lapolilla.org</servername>
         <servername>dbtechnology.com.co</servername>
         <servername>localhost</servername>
      </servernames>

...
<smtpserver enabled="true">
      <port>25</port>

      <handler>
         <helloName autodetect="true">myMailServer</helloName>
         <connectiontimeout>360000</connectiontimeout>

         <authRequired>true</authRequired>


Thanks in advance

Andy Bailey


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to