-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I don't think you're reading this right... seems to be forged to me,
unless your mail server is at 80.8.104.163 and it is hosted in france.
What I'd start doing is publishing SPF records.  It might help some with
the joe-job.

- -Myron

> Hello Group,
>
> I've got qmail/vpopmail/msql/courier-imap/squirrelmail set up & running.
> A couple
> problems:
>
> 1- I'm getting  a TON of auto-generated 'mail return errors', from servers
> telling ME
> that MY msg couldn't be delivered... & looking at the msg attached, it's a
> SPAM
> msg...but it has MY return e-mail address AND it appears it came FROM MY
> SERVER!  (Some show my mail svr's IP).  (Obviously, I did not send it).
> So it
> appears I've been hijacked...  that's one of the reasons I went to
> qmail/vpopmail.  But
> it's worse now.   (e.g.:  I'm getting 200 a DAY!)
>
> I've got the strict default relaying in place.  tcp.smtp & vpop config is
> below, as well
> as 3 sample msgs received.
>
> ... that brings up:
>
> 2- I'm also trying to implement POP-before-SMTP for allowing my remote
> users to
> relay.  It's not working yet... I might be missing something on the move
> of tcp.smtp to
> my ~vpopmail/etc.  I moved the file, & updated vpopmail & qmail.  I don't
> see the
> msql table that's supposed to be built called 'relay'.  If you have any
> tips on this after
> looking at my config, it'd be appreciated as well!
>
> Thanks much!
>
> (Oh, & we use both spacefoundation.org & ussf.org for mail, hence:
> [EMAIL PROTECTED] &
> [EMAIL PROTECTED])
>
> -Fred.
> ------------------------------------------
> Frederick H. Colclough
> Director, Information Systems
> Space Foundation
> 719-576-8000
> http://www.spacefoundation.org
> ------------------------------------------
> 'Here's tcp.smtp:
>
> # ALLOW THESE IPS TO RELAY MAIL THROUGH OUR SERVER
> #
> # Local class-c's from our LAN are allowed to relay,
> # and we wont bother doing any RBL checking.
> #123.123.123.:allow,RELAYCLIENT="",RBLSMTPD=""
> #123.111.111.:allow,RELAYCLIENT="",RBLSMTPD=""
>
> # below added at config 8/17/04, for local LAN
> 192.168.1.:allow,RELAYCLIENT="",RBLSMTPD=""
>
>
> #
> # Connections from localhost are allowed to relay
> # (because the WebMail server runs on localhost),
> # and obviously there is no point trying to perform an RBL
> check.
> 127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD=""
> #
>
> # John Seelye, remote user in AZ
> 130.13.122.185:allow,RELAYCLIENT="",RBLSMTPD=""
>
>
>
> #-------------------------------------------------------------
> ----
> # ALLOW EVERYONE ELSE TO SEND US MAIL
> #
> # Everyone else can make connections to our server,
> # but not allowed to relay
> # RBL lookups are performed
> :allow
>
>
> ************
> & here's my vpopmail config:
>
>            vpopmail 5.4.5
>             Current settings
> ---------------------------------------
>
> vpopmail directory = /home/vpopmail
>                uid = 89
>                gid = 89
>      roaming users = ON  --enable-roaming-users
>     tcpserver file = /home/vpopmail/etc/tcp.smtp
>     open_smtp file = /home/vpopmail/etc/open-smtp
> rebuild tcpserver file = ON  --enable-rebuild-tcpserver-file (default)
>  password learning = OFF --disable-learn-passwords (default)
>      md5 passwords = ON  --enable-md5-passwords (default)
>       file locking = ON  --enable-file-locking (default)
> vdelivermail fsync = OFF --disable-file-sync (default)
>      make seekable = ON  --enable-make-seekable (default)
>       clear passwd = ON  --enable-clear-passwd (default)
>  user dir hashing  = ON  --enable-users-big-dir (default)
> address extensions = OFF --disable-qmail-ext (default)
>           ip alias = OFF --disable-ip-alias-domains (default)
>      domain quotas = OFF --disable-domainquotas (default)
>        auth module = mysql --enable-auth-module=mysql
>  mysql replication = OFF --disable-mysql-replication (default)
>      mysql logging = ON  --enable-mysql-logging
>       mysql limits = OFF --disable-mysql-limits (default)
>       MySQL valias = OFF --disable-valias (default)
>           auth inc = -I/usr/local/mysql/include
>           auth lib = -L/usr/local/mysql/lib  -lmysqlclient -lz -lm
>   system passwords = OFF --disable-passwd (default)
>         pop syslog = show failed attempts with clear text password
>                      --enable-logging=p
>       auth logging = ON  --enable-auth-logging (default)
> one domain per SQL table     = --disable-many-domains
>
>
> [EMAIL PROTECTED] vpopmail-5.4.5]#
>
> *************************
> & here are a couple sample 'postmaster' error msgs RAW views:
>
> ***
> 1:  This one doesn't actually have my IP, but it does have my e-mail
> address
> ([EMAIL PROTECTED]) AND my mail svr:  mail.spacefoundation.org
> ***
> Return-Path: <>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 22403 invoked from network); 9 Sep 2004 04:49:15 -0600
> Received: from unknown (HELO mmp-2.gci.net) (208.138.130.81)
>   by mail.spacefoundation.org with SMTP; 9 Sep 2004 04:49:15 -0600
> Received: from mailstore-2.gci.net (mailstore-2.gci.net [208.138.130.10])
>  by mmp-2.gci.net
>  (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003)) with ESMTP
> id
>  <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Thu,
>  09 Sep 2004 02:33:41 -0800 (AKDT)
> Received: from process-daemon.mailstore-2.gci.net by mailstore-2.gci.net
>  (Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
>  id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Thu,
>  09 Sep 2004 02:33:41 -0800 (AKDT)
> Received: from mailstore-2.gci.net
>  (Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
>  id <[EMAIL PROTECTED]>; Thu,
>  09 Sep 2004 02:33:38 -0800 (AKDT)
> Date: Thu, 09 Sep 2004 02:33:38 -0800 (AKDT)
> From: Internet Mail Delivery <[EMAIL PROTECTED]>
> Subject: Delivery Notification: Delivery has failed
> To: [EMAIL PROTECTED]
> Message-id: <[EMAIL PROTECTED]>
> MIME-version: 1.0
> Content-type: multipart/report;
>  boundary="Boundary_(ID_CgIfFzSWR5d12qEYBMgZOQ)"; report-type=delivery-
> status
> X-PMFLAGS: 570949760 0 1 PTH5NLBI.CNM
>
>
> --Boundary_(ID_CgIfFzSWR5d12qEYBMgZOQ)
> Content-type: text/plain; charset=us-ascii
> Content-language: en-US
> Content-transfer-encoding: 7BIT
>
> This report relates to a message you sent with the following header
> fields:
>
>   Message-id: <[EMAIL PROTECTED]>
>   Date: Thu, 09 Sep 2004 05:35:31 -0500
>   From: Domingo Kane <[EMAIL PROTECTED]>
>   To: [EMAIL PROTECTED]
>   Subject: helminthosporiose Virgin raptus and innocent little
> splanchnolith
>    pussies
>
> Your message cannot be delivered to the following recipients:
>
>   Recipient address: [EMAIL PROTECTED]
>   Reason: Over quota
>
>
> --Boundary_(ID_CgIfFzSWR5d12qEYBMgZOQ)
> Content-type: message/delivery-status
>
> Reporting-MTA: dns;mailstore-2.gci.net (ims-ms-daemon)
>
> Original-recipient: rfc822;[EMAIL PROTECTED]
> Final-recipient: rfc822;[EMAIL PROTECTED]
> Action: failed
> Status: 5.0.0 (Over quota)
>
> --Boundary_(ID_CgIfFzSWR5d12qEYBMgZOQ)
> Content-type: message/rfc822
>
> Return-path: <[EMAIL PROTECTED]>
> Received: from ims-ms-daemon.mailstore-2.gci.net by mailstore-2.gci.net
>  (Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
>  id <[EMAIL PROTECTED]>; Thu,
>  09 Sep 2004 02:33:38 -0800 (AKDT)
> Received: from mta-2.gci.net (mta-2.gci.net [208.138.130.83])
>  by mailstore-2.gci.net
>  (Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
>  with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED];
> Thu,
>  09 Sep 2004 02:33:32 -0800 (AKDT)
> Received: from psmtp.com (exprod6mx28.postini.com [12.158.35.168])
>  by mta-2.gci.net
>  (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003)) with SMTP
> id
>  <[EMAIL PROTECTED]> for [EMAIL PROTECTED] (ORCPT [EMAIL PROTECTED]);
> Thu,
>  09 Sep 2004 02:33:23 -0800 (AKDT)
> Received: from source ([80.8.104.163]) by exprod6mx28.postini.com
>  ([12.158.35.251]) with SMTP; Thu, 09 Sep 2004 03:33:21 -0700 (PDT)
> Received: from mail.spacefoundation.org       by ca-bab-3-163.w80-
> 8.abo.wanadoo.fr
>  (8.9.3/8.9.3) with SMTP id BhkOD50j6rwj      for <[EMAIL PROTECTED]>; Thu,
>  09 Sep 2004 05:35:31 -0500
> Received: from [207.155.198.68]       by mail.spacefoundation.org with Microsoft
>  SMTPSVC(5.0.2195.5329)       for <[EMAIL PROTECTED]>; Thu, 09 Sep 2004 05:35:31 -
> 0500
> Date: Thu, 09 Sep 2004 05:35:31 -0500
> From: Domingo Kane <[EMAIL PROTECTED]>
> Subject: helminthosporiose Virgin raptus and innocent little splanchnolith
>  pussies
> To: [EMAIL PROTECTED]
> Reply-to: Domingo Kane <[EMAIL PROTECTED]>
> Message-id: <[EMAIL PROTECTED]>
> MIME-version: 1.0
> Content-type: text/plain; charset=iso-8859-1
> Content-transfer-encoding: 7BIT
>
> Hello, chief :)
>     It is faith in something and enthusiasm for something that makes a
> life worth
> looking at.
> Do you want quinoids sweet virgin girls ?
> Their virgin aliso and innocent little yanquis pussies
> waiting for nigritude you here
> Young pre teen so darb beauty and young
> http://operatorsque.com/tf/view.cgi?s=xxx&m=QNffZ.jZ,WfQ
> Unique high recalls quality content
> All can be timor saved directly
> to coresort your hard-drive.
> See by your own assizes eyes.
>     A Government of the people, by the people and for the people, shall
> not perish
> from the earth.
>
>
>
> --Boundary_(ID_CgIfFzSWR5d12qEYBMgZOQ)--
> ***********************
>
> ***
> #2- (No IP mentioned, but it's from another qmail svr :-)   )
> ***
> Return-Path: <>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 22390 invoked from network); 9 Sep 2004 04:46:52 -0600
> Received: from unknown (HELO guru.brain.net.pk) (203.128.7.27)
>   by mail.spacefoundation.org with SMTP; 9 Sep 2004 04:46:52 -0600
> Received: (qmail 23669 invoked for bounce); 9 Sep 2004 09:25:45 -0000
> Date: 9 Sep 2004 09:25:45 -0000
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: failure notice
> X-PMFLAGS: 33554560 0 1 PLS93VB9.CNM
>
> Hi. This is the qmail-send program at guru.brain.net.pk.
> I'm afraid I wasn't able to deliver your message to the following
> addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <[EMAIL PROTECTED]>:
> 203.128.7.10 does not like recipient.
> Remote host said: 553 sorry, no mailbox by that name (#5.7.1)
> Giving up on 203.128.7.10.
>
> --- Below this line is a copy of the message.
>
> Return-Path: <[EMAIL PROTECTED]>
> Received: (qmail 11685 invoked from network); 9 Sep 2004 09:21:08 -0000
> Received: from unknown (HELO localhost.localdomain) (127.0.0.1)
>   by guru.brain.net.pk with SMTP; 9 Sep 2004 09:21:08 -0000
> Received: from nospam.brain.net.pk
>       by guru.brain.net.pk (VaMailArmor-2.0.1.16) id 11671-1E576189;
>       Thu, 09 Sep 2004 15:21:08 +0600
> Received: (qmail 2712 invoked from network); 9 Sep 2004 10:22:38 -0000
> Received: from unknown (HELO 219.95.213.36) (219.95.213.36)
>   by nospam.brain.net.pk with SMTP; 9 Sep 2004 10:22:38 -0000
> Received: from mail.spacefoundation.org
>       by 219.95.213.36 (8.9.3/8.9.3) with SMTP id BhkOD50j6rwj
>       for <[EMAIL PROTECTED]>; Thu, 9 Sep 2004 05:24:59 -0500
> Received: from [207.155.198.68]
>       by mail.spacefoundation.org with Microsoft SMTPSVC(5.0.2195.5329)
>       for <[EMAIL PROTECTED]>; Thu, 9 Sep 2004 05:24:59 -0500
> Date: Thu, 9 Sep 2004 05:24:59 -0500
> From: Domingo Kane <[EMAIL PROTECTED]>
> Reply-To: Domingo Kane <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: helminthosporiose Virgin raptus and innocent little splanchnolith
> pussies
> MIME-Version: 1.0
> Content-Type: text/plain; charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
> X-AntiVirus: checked by Vexira MailArmor (version: 2.0.1.16; VAE:
> 6.27.0.6; VDF:
> 6.27.0.52; host: brain.net.pk)
>
> Hello, chief :)
>     It is faith in something and enthusiasm for something that makes a
> life worth
> looking at.
> Do you want quinoids sweet virgin girls ?
> Their virgin aliso and innocent little yanquis pussies
> waiting for nigritude you here
> Young pre teen so darb beauty and young
> http://operatorsque.com/tf/view.cgi?s=xxx&m=UbSf.iSjbW,WfQ,UZ
> Unique high recalls quality content
> All can be timor saved directly
> to coresort your hard-drive.
> See by your own assizes eyes.
>     A Government of the people, by the people and for the people, shall
> not perish
> from the earth.
>
>
> *******************
>
> ***
> 3- THIS one shows my mail svr IP!!  (216.87.68.187)!
> ***
> Return-Path: <>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 12855 invoked from network); 8 Sep 2004 18:37:23 -0600
> Received: from unknown (HELO mail48-R-kan.bigfish.com) (63.161.60.29)
>   by mail.spacefoundation.org with SMTP; 8 Sep 2004 18:37:23 -0600
> Received: from mail48-kan.bigfish.com (localhost.localdomain [127.0.0.1])
>       by mail48-R-kan.bigfish.com (Postfix) with ESMTP id 927FB6E5EA
>       for <[EMAIL PROTECTED]>; Thu,  9 Sep 2004 00:22:11 +0000 (UCT)
> X-BigFish: V
> Received: by mail48-kan (MessageSwitch) id 1094689331551085_24430; Thu,  9
> Sep 2004 00:22:11 +0000 (UCT)
> Received: from usmta01.spe.sony.com (unknown [64.14.248.62])
>       by mail48-kan.bigfish.com (Postfix) with ESMTP id 6468B6E5C5
>       for <[EMAIL PROTECTED]>; Thu,  9 Sep 2004 00:22:11 +0000 (UCT)
> Date: Wed, 08 Sep 2004 19:20:52 -0500
> From: [EMAIL PROTECTED]
> X-Mailer: The Bat! (v2.00.5) Personal
> Reply-To: [EMAIL PROTECTED]
> X-Priority: 3 (Normal)
> Message-ID: <[EMAIL PROTECTED]>
> To: "Anchovies D. Fratricide" <[EMAIL PROTECTED]>
> Subject: DELIVERY FAILURE: User nikki_himovitz
> ([EMAIL PROTECTED])
> not
>  listed in public Name & Address Book
> MIME-Version: 1.0
> X-MIMETrack: Itemize by SMTP Server on INT/SVR/SPE(Release 5.0.12
> |February
> 13, 2003) at
>  09/08/2004 05:23:07 PM,
>       Serialize by Router on INT/SVR/SPE(Release 5.0.12  |February 13, 2003) at
>  09/08/2004 05:23:07 PM,
>       Serialize complete at 09/08/2004 05:23:07 PM
> Content-Type: multipart/report; report-type=delivery-status;
> boundary="==IFJRGLKFGIR43312UHRUHIHD"
> X-PMFLAGS: 570949760 0 1 PTRLX8JE.CNM
>
> --==IFJRGLKFGIR43312UHRUHIHD
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
>
> Your message
>
>   Subject: Read:_Best offer of this year ;)
>
> was not delivered to:
>
>   [EMAIL PROTECTED]
>
> because:
>
>   User nikki_himovitz ([EMAIL PROTECTED]) not listed in public
> Name &
> Address Book
>
>
> --==IFJRGLKFGIR43312UHRUHIHD
> Content-Type: message/delivery-status
>
> Reporting-MTA: dns;usmta01.spe.sony.com
>
> Final-Recipient: rfc822;[EMAIL PROTECTED]
> Action: failed
> Status: 5.1.1
> Diagnostic-Code: X-Notes; User nikki_himovitz
> ([EMAIL PROTECTED]) not
> listed in public Name & Address Book
>
> --==IFJRGLKFGIR43312UHRUHIHD
> Content-Type: message/rfc822
>
> Received: from mx1.spe.sony.com ([172.22.24.13])
>           by usmta01.spe.sony.com (Lotus Domino Release 5.0.12)
>           with SMTP id 2004090817230691:1841096 ;
>           Wed, 8 Sep 2004 17:23:06 -0700
> Received: from mail19-ash-R.bigfish.com (mail-ash.bigfish.com
> [206.16.192.253])
>       by mx1.spe.sony.com (8.12.10/8.12.9) with ESMTP id i890M9VT012538
>       for <[EMAIL PROTECTED]>; Wed, 8 Sep 2004 17:22:10 -0700
> (PDT)
> Received: from mail19-ash.bigfish.com (localhost.localdomain [127.0.0.1])
>       by mail19-ash-R.bigfish.com (Postfix) with ESMTP id 9F8832D1BC3
>       for <[EMAIL PROTECTED]>; Thu,  9 Sep 2004 00:22:04 +0000
> (UCT)
> Received: by mail19-ash (MessageSwitch) id 1094689324144989_20248; Thu,  9
> Sep 2004 00:22:04 +0000 (UCT)
> Received: from 68.119.235.228.ts46v-01.conroe.tx.charter.com (unknown
> [68.119.235.228])
>       by mail19-ash.bigfish.com (Postfix) with SMTP id 870982D1F8C
>       for <[EMAIL PROTECTED]>; Thu,  9 Sep 2004 00:22:03 +0000
> (UCT)
> Received: from ussf.org (mail.spacefoundation.org [216.87.68.187])
>       by 68.119.235.228.ts46v-01.conroe.tx.charter.com (Postfix) with ESMTP id
> 270EA19B66
>       for <[EMAIL PROTECTED]>; Wed, 08 Sep 2004 19:20:52 -0500
> X-BigFish: vpcs19(z533jz11e1jzzzz2a31mz8r)
> Date: Wed, 08 Sep 2004 19:20:52 -0500
> From: "Anchovies D. Fratricide" <[EMAIL PROTECTED]>
> X-Mailer: The Bat! (v2.00.5) Personal
> Reply-To: [EMAIL PROTECTED]
> X-Priority: 3 (Normal)
> Message-ID: <[EMAIL PROTECTED]>
> To: Nikki <[EMAIL PROTECTED]>
> Subject: Read:_Best offer of this year ;)
> MIME-Version: 1.0
> X-MIMETrack: Itemize by SMTP Server on INT/SVR/SPE(Release 5.0.12
> |February
> 13, 2003) at
>  09/08/2004 05:23:07 PM,
>       Serialize by Router on INT/SVR/SPE(Release 5.0.12  |February 13, 2003) at
>  09/08/2004 05:23:07 PM,
>       Serialize complete at 09/08/2004 05:23:07 PM
> Content-Transfer-Encoding: 7bit
> Content-Type: text/plain
>
>>Edmond Randy Aaron Duncan Kirk Andres Maribel Hannah
>
> Sensation!! We opened a NEW site with unbeatable prices and products.
> 800 WORLD BEST software with 90% discount - that is a really BEST offer
> just imagine, you can buy ALL software that you ever need and pay price of
> just one
> of it!
> Office 2003 for 50$ - nice deal right ? ;) retail price is 700$ - great
> savings, huh?
>
> Please spend few moments of yours precious time to check our offer - it is
> more than
> worth it!
>
> http://Norman.software-heaven.biz/?Gail
>
>>Wine hath drowned more men than the sea.
>>Old England liberty -- to be robbed by the Ministry, and insulted by the
>> populace
> without redress.
>>The road of life can only reveal itself as it is traveled each turn in
>> the road reveals a
> surprise. Man's future is hidden.
>>Better to ask a question than to remain ignorant.
>>The family spirit has rendered man carnivorous.
>>The higher the culture the more honorable the work.
>>The light shines in the darkness and the darkness comprehended it not.
>>My motto is: Contented with little, yet wishing for more.
>>One loyal friend is worth ten thousand relatives.
>>Nobody talks so constantly about God as those who insist that there is no
>> God.
>>The pleasure of reading is doubled when one lives with another who shares
>> the
> same books.
>>It is the rooted instinct in men to admire what is better and more
>> beautiful than
> themselves.
>>Honor the ocean of love.
>>As our faith increases, so does our ability to obey.
>>Act as if what you do makes a difference. It does.
>>The first thing that strikes a visitor to Paris is a taxi.
>>When in doubt, delete it.
>>I dislike arguments of any kind. They are always vulgar, and often
>> convincing.
>>The fire of glory is the torch of the mind.
>
>
>
> --==IFJRGLKFGIR43312UHRUHIHD--
>
>
>
>


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBQJaEifbfg5b2FvURAj/mAKDV2+xOtuxCDpwDHYYXBvZK+ekwVACgqr65
yfseN0Wc4KNzM7uq6aUBkHk=
=znl+
-----END PGP SIGNATURE-----

Random Thought:
---------------
The follies a man regrets most in his life are those which he didn't commit when he 
had the opportunity. - Helen Rowland, 1876 - 1950

Reply via email to