Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 1st July 2012, 11:57
Barryvdw Barryvdw is offline
Junior Member
 
Join Date: Feb 2012
Posts: 22
Thanks: 1
Thanked 0 Times in 0 Posts
Default Why am I getting spam from LOCALHOST ?

Hey guys

It seems i am getting spam from my own mail server. (Actually trying to get ppl to provide there online banking details )

Any suggestions.

Return-Path: <nobody@abab.abab.com.tw>
Delivered-To: barry_at_bloemonline.co.za ( < ---- Local Mail account on server )
Received: from localhost (localhost [127.0.0.1])
by alpha.geektech.co.za (Postfix) with ESMTP id 900D01A00CF
for <barry@bloemonline.co.za>; Sun, 1 Jul 2012 08:12:37 +0200 (SAST)
X-Virus-Scanned: Debian amavisd-new at alpha.geektech.co.za
X-Spam-Flag: NO
X-Spam-Score: 4.41
X-Spam-Level: ****
X-Spam-Status: No, score=4.41 tagged_above=1 required=4.5 tests=[BAYES_50=0.8,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, NO_DNS_FOR_FROM=0.001,
RDNS_DYNAMIC=0.982, TO_NO_BRKTS_DYNIP=0.139, TVD_PH_SEC=1.764]
autolearn=no
Received: from alpha.geektech.co.za ([127.0.0.1])
by localhost (server1.example.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id GkxzhAePMPFR for <barry_at_bloemonline.co.za>;
Sun, 1 Jul 2012 08:12:33 +0200 (SAST)
Received: from abab.abab.com.tw (220-130-202-172.HINET-IP.hinet.net [220.130.202.172])
by alpha.geektech.co.za (Postfix) with ESMTP id 808EA1A00C5
for <barry_at_bloemonline.co.za>; Sun, 1 Jul 2012 08:12:30 +0200 (SAST)
Received:
by abab.abab.com.tw (8.12.8/8.12.7) id q616E6Yh005754;
Sun, 1 Jul 2012 14:14:06 +0800
Date: Sun, 1 Jul 2012 14:14:06 +0800
Message-Id: <201207010614.q616E6Yh005754@abab.abab.com.tw>
To: barry_at_bloemonline.co.za
Subject: EFT Payment Received!
From: ABSA <Ibsupports@absa.co.za>
Reply-To:
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=9323675DAC9943D878CB9A7813AF8BB2
X-EsetId: 02AA5D2303E7B83156EF02
Reply With Quote
Sponsored Links
  #2  
Old 1st July 2012, 12:44
cfoe cfoe is offline
ISPConfig Developer
 
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 57 Times in 32 Posts
Send a message via Skype™ to cfoe
Default

Quote:
Originally Posted by Barryvdw View Post
From: ABSA <Ibsupports@absa.co.za>
Is this a local mailbox?
__________________
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote
  #3  
Old 1st July 2012, 13:55
Barryvdw Barryvdw is offline
Junior Member
 
Join Date: Feb 2012
Posts: 22
Thanks: 1
Thanked 0 Times in 0 Posts
Default

No its not
Reply With Quote
  #4  
Old 1st July 2012, 13:58
cfoe cfoe is offline
ISPConfig Developer
 
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 57 Times in 32 Posts
Send a message via Skype™ to cfoe
Default

POst the complete header here: http://www.iptrackeronline.com/email...r-analysis.php

You can see its spam from Taiwan
__________________
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote
  #5  
Old 1st July 2012, 17:33
Barryvdw Barryvdw is offline
Junior Member
 
Join Date: Feb 2012
Posts: 22
Thanks: 1
Thanked 0 Times in 0 Posts
Default

For sure it is spam ... but how are they sending from my own server to me.. and how do I stop this ?
Reply With Quote
  #6  
Old 1st July 2012, 21:15
cfoe cfoe is offline
ISPConfig Developer
 
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 57 Times in 32 Posts
Send a message via Skype™ to cfoe
 
Default

post the email header on the side and you see that it is not coming from localhost!!

It is coming from 220.130.202.172 from Taiwan.
__________________
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote
The Following User Says Thank You to cfoe For This Useful Post:
Barryvdw (1st July 2012)
Reply

Bookmarks

Tags
ispconfig 3, localhost, spam

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
strange fail2ban behaviour > doesn't ban specific IP Djamu Server Operation 2 13th January 2012 02:29
CPU load locks up box. Apache or MYSQL related. crypted General 61 29th October 2010 22:16
Ubuntu 8.04 Spamsnake - all SA scores 0.00 Thomas_Powers HOWTO-Related Questions 23 24th June 2008 17:37
Question about Virtual Hosting With Proftpd And MySQL (Incl. Quota) On Debian Etch ikkem HOWTO-Related Questions 30 26th February 2008 19:38
Mail errors unknown address terryoleary1981 General 9 10th January 2008 16:51


All times are GMT +2. The time now is 04:07.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.