New kind of spam ?

[benito]

Hi!

As you can see on this email header, last week i start receiving a lot of spam from people that just add two letters to our email addresses and my mail server autenticates the sender !

For example, my email is cristian@domain.com and the spammer sent an email to me as TVcristian@domain.com and the spam pass trought all walls even the boxtrapper. Anyone find any solution for that ?

From tvcristian@domain.com Mon Jun 26 10:03:27 2006
Received: from [211.41.203.175] (helo=59F90768)
 by nikita.domain.com with smtp (Exim 4.52)
 id 1FuqkP-0007jH-Uw; Mon, 26 Jun 2006 10:03:27 -0300
Received: from 211.41.203.175
        (SquirrelMail authenticated user tvcristian@domain.com);
        by xx.xx.xx.xx with HTTP;
        Mon, 26 Jun 2006 08:03:32 -0600
Message-Id: <YISTIGVCAFAD.67314437283990@211.41.203.175>
Date: Mon, 26 Jun 2006 08:03:32 -0600
Subject: a degree is the key to success
From: "Pete Allred" <tvcristian@domain.com>
To: cristian@domain.com

[brianoz]

Uhhh ... read that agin carefully lad, it's to cristian@domain.com and it's FROM TVcristian@domain.com - quite a different kettle of fish!

[benito]

ok, but why squirrell authenticates one email address that is not on my domain ?

(SquirrelMail authenticated user tvcristian@domain.com);

[deieno]

Hi, the same happened to me. Can you tell me how you fixed the problem?

[duranduran]

Same here. See:


Return-path: <funds@finance.com>
Received: from pontodoh by ssl.lx4server.com with local (Exim 4.66)
(envelope-from <funds@finance.com>)
id 1IQ7Ko-0002rH-12; Tue, 28 Aug 2007 17:06:46 -0300
Received: from 195.166.237.254 ([195.166.237.254])
(SquirrelMail authenticated user mamuzu@pontodohardware.com.br)
by 74.53.77.146 with HTTP;
Tue, 28 Aug 2007 17:06:45 -0300 (BRT)
Message-ID: <28662.195.166.237.254.1188331605.squirrel@74.53.77.146>
Date: Tue, 28 Aug 2007 17:06:45 -0300 (BRT)
Subject: DEAR FRIEND (UNFINISHED TRANSFER OF YOUR FUND)
From: "MACK FOY" <funds@finance.com>
Reply-To: murrayjames_financialagent5@yahoo.fr
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Sender: <pontodoh@ssl.lx4server.com>

pontodoh is a real user name (mamuzu@pontodohardware.com.br)