Help - Search - Members - Calendar
Full Version: How to tell if Spam is being sent from my server
The Planet Forums > Security > General Security
donthe
Spam Emails are being sent using my domain name. The Headers are below. The ip address is correct. All information seems to be correct. how do I determine if the email is being sent through my server?

I don't think it's possible that it is being sent through my website/forum as I receive a copy of all emails sent from my forum.


Return-Path: <forum@mywebsite.com>
Authentication-Results: mta482.mail.re4.yahoo.com from=mywebsite; domainkeys=neutral (no sig); from=mywebsite; dkim=neutral (no sig)
Received: from 75.125.220.178 (EHLO C59913-77961.home) (75.125.220.178) by mta482.mail.re4.yahoo.com with SMTP; Tue, 07 Jul 2009 20:24:48 -0700
Received: with MailEnable Postoffice Connector; Tue, 07 Jul 2009 22:48:37 -0400
Received: from 189.82.79.58 ([189.82.79.58]) by home with MailEnable ESMTP; Tue, 07 Jul 2009 22:48:35 -0400
From:
forum@mywebsite
View contact details
To: forum@mywebsite
Subject: RE: WebHelp 032630
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Content-Length: 4346
ajz4221
If I remember from my MailEnable days, there are logs somewhere of messages sent through your server.
You could lookup the address and see if those were in fact flowing through your mail server.

Make sure you don't allow relaying.

If a message went through your server, your mail server IP address would be in the mail header.

It took all I had to keep MailEnable patched and configured correctly to try to prevent spam but it was a pain.
I read very few positive comments about that mail software several years ago.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.