View Single Post
Old 25th February 2008, 12:11
Rockdrala Rockdrala is offline
Senior Member
Join Date: Dec 2007
Posts: 140
Thanks: 7
Thanked 2 Times in 2 Posts

Originally Posted by tristanlee85
I don't know if this helps or not, but:

disconnect from[]----

Spammer email qued using fake TLD
Feb 24 03:06:39 server postfix/qmgr[26388]: 4683B10F9F9: from=<>, size=969, nrcpt=1 (queue active)

Feb 24 03:06:39 server postfix/local[29777]: 4683B10F9F9: to=<>, relay=local, delay=2.2, delays=2.2/0/0/0

Your people checking there email.
Login: user=<tlee_kwh>,
Login: user=<admin>,

Spammer email incoming
Feb 24 03:07:26 server postfix/smtpd[29769]: connect from unknown[]
Feb 24 03:07:28 server postfix/smtpd[29769]: 5D3B710F9F9: client=unknown[]

Feb 24 03:07:29 server postfix/cleanup[29773]: 5D3B710F9F9: message-id=<758890690.49084435843157@bodymindacupressure.c om>

Feb 24 03:07:29 server postfix/qmgr[26388]: 5D3B710F9F9: from=<zojbodymindacupressurebyk@bodymindacupressur>, size=4220, nrcpt=1 (queue active)

Spammer emailed Delivered.
Feb 24 03:07:29 server postfix/local[29777]: 5D3B710F9F9: to=<>, relay=local, delay=1, delays=1/0/0/0, dsn=2.0.0, status=sent (deliv
ered to maildir)
Enable your spam protection? Your spam detection should have blocked it for the simple fact (.bm) is not a valid TLD.
Reply With Quote