View Single Post
  #5  
Old 25th February 2008, 11:11
Rockdrala Rockdrala is offline
Senior Member
 
Join Date: Dec 2007
Posts: 140
Thanks: 7
Thanked 2 Times in 2 Posts
Default

Quote:
Originally Posted by tristanlee85
I don't know if this helps or not, but:

disconnect from ip-122-160.sn2.eutelia.it[83.211.122.160]----

Spammer email qued using fake TLD
Feb 24 03:06:39 server postfix/qmgr[26388]: 4683B10F9F9: from=<romeu@jw.bm>, size=969, nrcpt=1 (queue active)

Feb 24 03:06:39 server postfix/local[29777]: 4683B10F9F9: to=<tristan@plastikracing.net>, relay=local, delay=2.2, delays=2.2/0/0/0

Your people checking there email.
Login: user=<tlee_kwh>, 192.168.1.130
Login: user=<admin>, 192.168.1.130

Spammer email incoming
Feb 24 03:07:26 server postfix/smtpd[29769]: connect from unknown[211.37.21.241]
Feb 24 03:07:28 server postfix/smtpd[29769]: 5D3B710F9F9: client=unknown[211.37.21.241]


Feb 24 03:07:29 server postfix/cleanup[29773]: 5D3B710F9F9: message-id=<758890690.49084435843157@bodymindacupressure.c om>

Feb 24 03:07:29 server postfix/qmgr[26388]: 5D3B710F9F9: from=<zojbodymindacupressurebyk@bodymindacupressur e.com>, size=4220, nrcpt=1 (queue active)

Spammer emailed Delivered.
Feb 24 03:07:29 server postfix/local[29777]: 5D3B710F9F9: to=<tristan@plastikracing.net>, relay=local, delay=1, delays=1/0/0/0, dsn=2.0.0, status=sent (deliv
ered to maildir)
[/code]
Enable your spam protection? Your spam detection should have blocked it for the simple fact (.bm) is not a valid TLD.
Reply With Quote