The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

New kind of spam ?

Discussion in 'General Discussion' started by benito, Jun 26, 2006.

  1. benito

    benito Well-Known Member

    Joined:
    Jan 8, 2004
    Messages:
    296
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Mar del Plata - Argentina
    Hi!

    As you can see on this email header, last week i start receiving a lot of spam from people that just add two letters to our email addresses and my mail server autenticates the sender !

    For example, my email is cristian@domain.com and the spammer sent an email to me as TVcristian@domain.com and the spam pass trought all walls even the boxtrapper. Anyone find any solution for that ?

    Code:
    From tvcristian@domain.com Mon Jun 26 10:03:27 2006
    Received: from [211.41.203.175] (helo=59F90768)
     by nikita.domain.com with smtp (Exim 4.52)
     id 1FuqkP-0007jH-Uw; Mon, 26 Jun 2006 10:03:27 -0300
    Received: from 211.41.203.175
            (SquirrelMail authenticated user tvcristian@domain.com);
            by xx.xx.xx.xx with HTTP;
            Mon, 26 Jun 2006 08:03:32 -0600
    Message-Id: <YISTIGVCAFAD.67314437283990@211.41.203.175>
    Date: Mon, 26 Jun 2006 08:03:32 -0600
    Subject: a degree is the key to success
    From: "Pete Allred" <tvcristian@domain.com>
    To: cristian@domain.com
    
     
  2. brianoz

    brianoz Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,146
    Likes Received:
    6
    Trophy Points:
    38
    Location:
    Melbourne, Australia
    cPanel Access Level:
    Root Administrator
  3. benito

    benito Well-Known Member

    Joined:
    Jan 8, 2004
    Messages:
    296
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Mar del Plata - Argentina
    ok, but why squirrell authenticates one email address that is not on my domain ?

    (SquirrelMail authenticated user tvcristian@domain.com);
     
  4. deieno

    deieno Well-Known Member

    Joined:
    Nov 16, 2003
    Messages:
    69
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Floripa - Brazil
    Hi, the same happened to me. Can you tell me how you fixed the problem?
     
  5. duranduran

    duranduran Well-Known Member

    Joined:
    Apr 30, 2004
    Messages:
    198
    Likes Received:
    0
    Trophy Points:
    16
    Same here. See:


    Return-path: <funds@finance.com>
    Received: from pontodoh by ssl.lx4server.com with local (Exim 4.66)
    (envelope-from <funds@finance.com>)
    id 1IQ7Ko-0002rH-12; Tue, 28 Aug 2007 17:06:46 -0300
    Received: from 195.166.237.254 ([195.166.237.254])
    (SquirrelMail authenticated user mamuzu@pontodohardware.com.br)
    by 74.53.77.146 with HTTP;
    Tue, 28 Aug 2007 17:06:45 -0300 (BRT)
    Message-ID: <28662.195.166.237.254.1188331605.squirrel@74.53.77.146>
    Date: Tue, 28 Aug 2007 17:06:45 -0300 (BRT)
    Subject: DEAR FRIEND (UNFINISHED TRANSFER OF YOUR FUND)
    From: "MACK FOY" <funds@finance.com>
    Reply-To: murrayjames_financialagent5@yahoo.fr
    User-Agent: SquirrelMail/1.4.9a
    MIME-Version: 1.0
    Content-Type: text/plain;charset=iso-8859-1
    Content-Transfer-Encoding: 8bit
    X-Priority: 3 (Normal)
    Importance: Normal
    Sender: <pontodoh@ssl.lx4server.com>

    pontodoh is a real user name (mamuzu@pontodohardware.com.br)
     
Loading...

Share This Page