Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

New kind of spam ?

Discussion in 'General Discussion' started by benito, Jun 26, 2006.

  1. benito

    benito Well-Known Member

    Joined:
    Jan 8, 2004
    Messages:
    318
    Likes Received:
    3
    Trophy Points:
    168
    Location:
    Mar del Plata - Argentina
    Hi!

    As you can see on this email header, last week i start receiving a lot of spam from people that just add two letters to our email addresses and my mail server autenticates the sender !

    For example, my email is cristian@domain.com and the spammer sent an email to me as TVcristian@domain.com and the spam pass trought all walls even the boxtrapper. Anyone find any solution for that ?

    Code:
    From tvcristian@domain.com Mon Jun 26 10:03:27 2006
    Received: from [211.41.203.175] (helo=59F90768)
     by nikita.domain.com with smtp (Exim 4.52)
     id 1FuqkP-0007jH-Uw; Mon, 26 Jun 2006 10:03:27 -0300
    Received: from 211.41.203.175
            (SquirrelMail authenticated user tvcristian@domain.com);
            by xx.xx.xx.xx with HTTP;
            Mon, 26 Jun 2006 08:03:32 -0600
    Message-Id: <YISTIGVCAFAD.67314437283990@211.41.203.175>
    Date: Mon, 26 Jun 2006 08:03:32 -0600
    Subject: a degree is the key to success
    From: "Pete Allred" <tvcristian@domain.com>
    To: cristian@domain.com
    
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. brianoz

    brianoz Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,146
    Likes Received:
    6
    Trophy Points:
    168
    Location:
    Melbourne, Australia
    cPanel Access Level:
    Root Administrator
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. benito

    benito Well-Known Member

    Joined:
    Jan 8, 2004
    Messages:
    318
    Likes Received:
    3
    Trophy Points:
    168
    Location:
    Mar del Plata - Argentina
    ok, but why squirrell authenticates one email address that is not on my domain ?

    (SquirrelMail authenticated user tvcristian@domain.com);
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. deieno

    deieno Well-Known Member

    Joined:
    Nov 16, 2003
    Messages:
    69
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Floripa - Brazil
    Hi, the same happened to me. Can you tell me how you fixed the problem?
     
  5. duranduran

    duranduran Well-Known Member

    Joined:
    Apr 30, 2004
    Messages:
    198
    Likes Received:
    0
    Trophy Points:
    166
    Same here. See:


    Return-path: <funds@finance.com>
    Received: from pontodoh by ssl.lx4server.com with local (Exim 4.66)
    (envelope-from <funds@finance.com>)
    id 1IQ7Ko-0002rH-12; Tue, 28 Aug 2007 17:06:46 -0300
    Received: from 195.166.237.254 ([195.166.237.254])
    (SquirrelMail authenticated user mamuzu@pontodohardware.com.br)
    by 74.53.77.146 with HTTP;
    Tue, 28 Aug 2007 17:06:45 -0300 (BRT)
    Message-ID: <28662.195.166.237.254.1188331605.squirrel@74.53.77.146>
    Date: Tue, 28 Aug 2007 17:06:45 -0300 (BRT)
    Subject: DEAR FRIEND (UNFINISHED TRANSFER OF YOUR FUND)
    From: "MACK FOY" <funds@finance.com>
    Reply-To: murrayjames_financialagent5@yahoo.fr
    User-Agent: SquirrelMail/1.4.9a
    MIME-Version: 1.0
    Content-Type: text/plain;charset=iso-8859-1
    Content-Transfer-Encoding: 8bit
    X-Priority: 3 (Normal)
    Importance: Normal
    Sender: <pontodoh@ssl.lx4server.com>

    pontodoh is a real user name (mamuzu@pontodohardware.com.br)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice