Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration
Reload this Page Why am I getting spam from LOCALHOST ?
Register FAQ Members List Social Groups Calendar Search Today's Posts Mark Forums Read

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 1st July 2012, 11:57
Barryvdw Barryvdw is offline
Junior Member
  
Join Date: Feb 2012
Posts: 21
Thanks: 1
Thanked 0 Times in 0 Posts
Default Why am I getting spam from LOCALHOST ?
Hey guys

It seems i am getting spam from my own mail server. (Actually trying to get ppl to provide there online banking details )

Any suggestions.

Return-Path: <nobody@abab.abab.com.tw>
Delivered-To: barry_at_bloemonline.co.za ( < ---- Local Mail account on server )
Received: from localhost (localhost [127.0.0.1])
by alpha.geektech.co.za (Postfix) with ESMTP id 900D01A00CF
for <barry@bloemonline.co.za>; Sun, 1 Jul 2012 08:12:37 +0200 (SAST)
X-Virus-Scanned: Debian amavisd-new at alpha.geektech.co.za
X-Spam-Flag: NO
X-Spam-Score: 4.41
X-Spam-Level: ****
X-Spam-Status: No, score=4.41 tagged_above=1 required=4.5 tests=[BAYES_50=0.8,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, NO_DNS_FOR_FROM=0.001,
RDNS_DYNAMIC=0.982, TO_NO_BRKTS_DYNIP=0.139, TVD_PH_SEC=1.764]
autolearn=no
Received: from alpha.geektech.co.za ([127.0.0.1])
by localhost (server1.example.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id GkxzhAePMPFR for <barry_at_bloemonline.co.za>;
Sun, 1 Jul 2012 08:12:33 +0200 (SAST)
Received: from abab.abab.com.tw (220-130-202-172.HINET-IP.hinet.net [220.130.202.172])
by alpha.geektech.co.za (Postfix) with ESMTP id 808EA1A00C5
for <barry_at_bloemonline.co.za>; Sun, 1 Jul 2012 08:12:30 +0200 (SAST)
Received:
by abab.abab.com.tw (8.12.8/8.12.7) id q616E6Yh005754;
Sun, 1 Jul 2012 14:14:06 +0800
Date: Sun, 1 Jul 2012 14:14:06 +0800
Message-Id: <201207010614.q616E6Yh005754@abab.abab.com.tw>
To: barry_at_bloemonline.co.za
Subject: EFT Payment Received!
From: ABSA <Ibsupports@absa.co.za>
Reply-To:
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=9323675DAC9943D878CB9A7813AF8BB2
X-EsetId: 02AA5D2303E7B83156EF02
Reply With Quote
Sponsored Links
  #2  
Old 1st July 2012, 12:44
cfoe cfoe is offline
ISPConfig Developer
  
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 56 Times in 31 Posts
Send a message via Skype™ to cfoe
Default
Quote:
Originally Posted by Barryvdw View Post
From: ABSA <Ibsupports@absa.co.za>
Is this a local mailbox?
__________________
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote
  #3  
Old 1st July 2012, 13:55
Barryvdw Barryvdw is offline
Junior Member
  
Join Date: Feb 2012
Posts: 21
Thanks: 1
Thanked 0 Times in 0 Posts
Default
No its not
Reply With Quote
  #4  
Old 1st July 2012, 13:58
cfoe cfoe is offline
ISPConfig Developer
  
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 56 Times in 31 Posts
Send a message via Skype™ to cfoe
Default
POst the complete header here: http://www.iptrackeronline.com/email...r-analysis.php

You can see its spam from Taiwan
__________________
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote
  #5  
Old 1st July 2012, 17:33
Barryvdw Barryvdw is offline
Junior Member
  
Join Date: Feb 2012
Posts: 21
Thanks: 1
Thanked 0 Times in 0 Posts
Default
For sure it is spam ... but how are they sending from my own server to me.. and how do I stop this ?
Reply With Quote
  #6  
Old 1st July 2012, 21:15
cfoe cfoe is offline
ISPConfig Developer
  
Join Date: Oct 2011
Location: NRW, Germany
Posts: 233
Thanks: 27
Thanked 56 Times in 31 Posts
Send a message via Skype™ to cfoe
 
Default
post the email header on the side and you see that it is not coming from localhost!!

It is coming from 220.130.202.172 from Taiwan.
__________________
Christian Foellmann

OpenSource-Projects - GitHub-Projects - SVN-Mirrors on GitHub - Foe Services
Reply With Quote
The Following User Says Thank You to cfoe For This Useful Post:
Barryvdw (1st July 2012)
Reply

Bookmarks

Tags
ispconfig 3, localhost, spam

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
strange fail2ban behaviour > doesn't ban specific IP Djamu Server Operation 2 13th January 2012 02:29
CPU load locks up box. Apache or MYSQL related. crypted General 61 29th October 2010 22:16
Ubuntu 8.04 Spamsnake - all SA scores 0.00 Thomas_Powers HOWTO-Related Questions 23 24th June 2008 17:37
Question about Virtual Hosting With Proftpd And MySQL (Incl. Quota) On Debian Etch ikkem HOWTO-Related Questions 30 26th February 2008 19:38
Mail errors unknown address terryoleary1981 General 9 10th January 2008 16:51


All times are GMT +2. The time now is 21:40.

Contact Us - HowtoForge - Linux Howtos and Tutorials - Archive - Top

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2013, vBulletin Solutions, Inc.