Recently a stream of messages has been arriving to a site I host
apparently from the webmaster of the site, however its really from a
spammer/virus each message has a virus attached.
What can I do to reject messages that appear to be from an account that
they are not from.
Im not an expert on james i.e. I managed to install it a year ago and
havent touched it since, (which shows how good it is) so please dont
assume I know about maillets or processors (appart from the names).
Also Im not sure it its related but I also received this message
Return-Path: <[EMAIL PROTECTED]>
Received: from 62.29.80.104 ([62.29.80.104]) by hazlo.hazlorealidad.com
(JAMES SMTP Server 2.2.0) with SMTP ID 734 for
<[EMAIL PROTECTED]>;
Wed, 12 Apr 2006 02:00:05 -0500 (COT)
The following error occurred: <P>
Date: Wed, 12 Apr 2006 02:00:05 -0500 (COT)
From: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0
Message-ID:
<[EMAIL PROTECTED]>
X-Evolution-Source: pop://[EMAIL PROTECTED]
Subject: No Subject
Thanks in advance
Andy Bailey
Excerpt of message
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Enviado el: Martes, 04 de Abril de 2006 05:04 p.m.
Para: [EMAIL PROTECTED]
Asunto: Your password has been successfully updated
Dear user suempresa,
....
03/02/06 17:14:27 DEBUG smtpserver: Calling start()
03/02/06 17:14:27 DEBUG smtpserver: Watchdog default Worker #10 has time
to sleep 360000
03/02/06 17:14:27 DEBUG smtpserver: Command received: HELO 58F2A7E8
03/02/06 17:14:27 DEBUG smtpserver: Sent: 250-hazlo.hazlorealidad.com
Hello 58F2A7E8 (210.113.158.55 [210.113.158.55])
03/02/06 17:14:27 DEBUG smtpserver: Sent: 250-AUTH LOGIN PLAIN
03/02/06 17:14:27 DEBUG smtpserver: Sent: 250 AUTH=LOGIN PLAIN
03/02/06 17:14:27 DEBUG smtpserver: Calling reset() default Worker #10
03/02/06 17:14:28 DEBUG smtpserver: Command received: MAIL FROM:
<[EMAIL PROTECTED]>
03/02/06 17:14:28 DEBUG smtpserver: Sent: 250 Sender
<[EMAIL PROTECTED]> OK
03/02/06 17:14:28 DEBUG smtpserver: Calling reset() default Worker #10
03/02/06 17:14:28 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
03/02/06 17:14:28 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
03/02/06 17:14:28 DEBUG smtpserver: Calling reset() default Worker #10
....
11/04/06 12:24:51 DEBUG smtpserver: Calling start()
11/04/06 12:24:51 DEBUG smtpserver: Watchdog default Worker #12 has time
to sleep 360000
11/04/06 12:24:53 DEBUG smtpserver: Command received: HELO RSTN-SERVER
11/04/06 12:24:53 DEBUG smtpserver: Sent: 250-hazlo.hazlorealidad.com
Hello RSTN-SERVER (218.188.19.28 [218.188.19.28])
11/04/06 12:24:53 DEBUG smtpserver: Sent: 250-AUTH LOGIN PLAIN
11/04/06 12:24:53 DEBUG smtpserver: Sent: 250 AUTH=LOGIN PLAIN
11/04/06 12:24:53 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:24:55 DEBUG smtpserver: Command received: MAIL FROM:
<[EMAIL PROTECTED]>
11/04/06 12:24:55 DEBUG smtpserver: Sent: 250 Sender
<[EMAIL PROTECTED]> OK
11/04/06 12:24:55 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:24:57 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
11/04/06 12:24:57 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
11/04/06 12:24:57 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:24:59 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
11/04/06 12:24:59 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
11/04/06 12:24:59 DEBUG smtpserver: Calling reset() default Worker #12
11/04/06 12:25:03 DEBUG smtpserver: Command received: RCPT TO:
<[EMAIL PROTECTED]>
11/04/06 12:25:03 DEBUG smtpserver: Sent: 250 Recipient
<[EMAIL PROTECTED]> OK
11/04/06 12:25:03 DEBUG smtpse...
Extract from config file
<servernames autodetect="false" autodetectIP="true">
<!-- CONFIRM? -->
<servername>hazlorealidad.com</servername>
<servername>hazlo.hazlorealidad.com</servername>
<servername>globalfastmoney.com</servername>
<servername>piramidesasesores.com</servername>
<servername>globalredes.com</servername>
<servername>lapolilla.org</servername>
<servername>dbtechnology.com.co</servername>
<servername>localhost</servername>
</servernames>
...
<smtpserver enabled="true">
<port>25</port>
<handler>
<helloName autodetect="true">myMailServer</helloName>
<connectiontimeout>360000</connectiontimeout>
<authRequired>true</authRequired>
Thanks in advance
Andy Bailey
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]