Please help with this kind of SPAM !

[YALDesign]

Hi all, I appeal to you because you are the last hope for solving this problem. For a while my clients including myself. receive such emails ex : [email protected] from [email protected]. And so my clients receive hundreds of emails daily [email protected] send to [email protected], but this email user is not created on the server. I worked SpamAssain module but still get hundreds of e-mails of this kind!

2012-12-09 03:54:42 SMTP connection from [190.80.244.111]:50914 (TCP/IP connection count = 1)
2012-12-09 03:54:42 no IP address found for host 111.244.80.190.m.sta.codetel.net.do (during SMTP connection from [190.80.244.111]:50914)
2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 F=<[email protected]> rejected RCPT <[B][email protected]>: No Such User Here"[/B]
2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 Warning: "Detected session with all messages failed"
2012-12-09 03:54:43 H=(speedtouch.lan) [190.80.244.111]:50914 Warning: "Increment slow_fail_block Ratelimit - (speedtouch.lan) [190.80.244.111]:50914 because of all messages failed"
2012-12-09 03:54:43 SMTP connection from (speedtouch.lan) [190.80.244.111]:50914 closed by QUIT
2012-12-09 03:55:30 SMTP connection from [95.160.146.255]:13444 (TCP/IP connection count = 1)
2012-12-09 03:55:30 SMTP connection from [95.160.146.255]:13476 (TCP/IP connection count = 2)

2012-12-10 15:13:29 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15696 rejected MAIL <[email protected]>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
2012-12-10 15:13:32 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15726 rejected MAIL <[email protected]>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
2012-12-10 15:13:33 H=178-36-209-210.adsl.inetia.pl (netiaspot) [178.36.209.210]:15763 rejected MAIL <[email protected]>: Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
2012-12-10 15:13:59 H=([109.100.51.133]) [109.100.51.133]:24626 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:43 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"
2012-12-10 15:21:54 H=p50878e86.dip0.t-ipconnect.de [80.135.142.134]:40621 F=<[email protected]> rejected RCPT <[email protected]>: No Such User Here"

This user [email protected] is not on my server ! And like that hundred of [email protected]
If you need more information from my server tell me and i will paste !
If you are kind and know what to do please help me !

 

[albatroz]

Hello,
I seems like we are in the same boat, as I have a similar problem.
In case anybody can help me I am attaching an extract of my exim log file here

 

[Infopro]

Link removed. No need to post that much information on these forums.

 

[dreas]

These appear to be "normal" spam connections trying to find valid email users in your domains? What's the exact issue it is causing?

 

[YALDesign]

Nobody knows the problem i think !

 

[dalem]

As Infopro stated its not a SPAM problem it just your SMTP server rejecting email

 

[YALDesign]

And what i should do to solve that problem ?

 

[mtindor]

And what i should do to solve that problem ?

Nothing. It's doing what you want it to do, which is to reject mail for users that do not exist.

M