Help - Search - Members - Calendar
Full Version: Spam Help!
The Planet Forums > General > The Lounge
APC Hosting
Hi All, I wake up this morning to find 180 e-mails in my inbox which are Mail Delivery Failure notices. In looking at the e-mails further I find that they haven't originated from my server but are supposedly from info@apchosting.co.uk.

=======================
Your message to: info@hsmse.org
was blocked by our Spam Firewall. The email you sent with the following subject has NOT BEEN DELIVERED:

Subject: New American Drugs store

If you believe this is in error, please forward this email to support@educationalnetworks.net.

--------------------------------------------------------------------------------
Received: from netmailinfo.net (unknown [61.84.243.91])
by smtp.educationalnetworks.net (Spam Firewall) with SMTP id E648B31A4C
for <info@hsmse.org>; Wed, 22 Feb 2006 21:36:11 -0500 (EST)
Received: from localhost (helo=localhost.localdomain)
by netmailinfo.net with SMTP id J87Gz025474580;
Thu, 23 Feb 2006 02:46:04 +0000
Message-Id: <dnriPR.gjs4is@phpsender>
Date: Thu, 23 Feb 2006 02:46:04 +0000
Subject: New American Drugs store
From: "Paola" <info@apchosting.co.uk>
To: info@hsmse.org
X-Mailer: JUST MAILER v1.22
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
=======================

If I am reading this correctly the spammer is sending the mail from "Received: from netmailinfo.net (unknown [61.84.243.91])"

61.84.243.91 is a korean Ip address. What steps do I take to stop this person sending e-mail out under my business domain name as I am sure I am going to get listed soon.

Many Thanks

Andrew
Matt2k
You can't do anything about it and you won't be listed if they didn't come from your IPs. It happens to everyone from time-to-time..
APC Hosting
Ahh ok thanks, just annoying they I get all the replies.

As long as I don't get spam listed I don't mind too much.

Many Thanks

Andrew
klaude
You can't stop someone from using your email address in their From: headers, but you can use things like SPF. Hopefully the MTA on the other end knows SPF and will kick out messages like the one above.
Beansprout
Only 180? Count yourself lucky icon_biggrin.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.