Why am I getting spam from LOCALHOST ?

Discussion in 'Installation/Configuration' started by Barryvdw, Jul 1, 2012.

  1. Barryvdw

    Barryvdw New Member

    Hey guys

    It seems i am getting spam from my own mail server. (Actually trying to get ppl to provide there online banking details )

    Any suggestions.

    Return-Path: <[email protected]>
    Delivered-To: barry_at_bloemonline.co.za ( < ---- Local Mail account on server )
    Received: from localhost (localhost [127.0.0.1])
    by alpha.geektech.co.za (Postfix) with ESMTP id 900D01A00CF
    for <[email protected]>; Sun, 1 Jul 2012 08:12:37 +0200 (SAST)
    X-Virus-Scanned: Debian amavisd-new at alpha.geektech.co.za
    X-Spam-Flag: NO
    X-Spam-Score: 4.41
    X-Spam-Level: ****
    X-Spam-Status: No, score=4.41 tagged_above=1 required=4.5 tests=[BAYES_50=0.8,
    HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, NO_DNS_FOR_FROM=0.001,
    RDNS_DYNAMIC=0.982, TO_NO_BRKTS_DYNIP=0.139, TVD_PH_SEC=1.764]
    autolearn=no
    Received: from alpha.geektech.co.za ([127.0.0.1])
    by localhost (server1.example.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id GkxzhAePMPFR for <barry_at_bloemonline.co.za>;
    Sun, 1 Jul 2012 08:12:33 +0200 (SAST)
    Received: from abab.abab.com.tw (220-130-202-172.HINET-IP.hinet.net [220.130.202.172])
    by alpha.geektech.co.za (Postfix) with ESMTP id 808EA1A00C5
    for <barry_at_bloemonline.co.za>; Sun, 1 Jul 2012 08:12:30 +0200 (SAST)
    Received:
    by abab.abab.com.tw (8.12.8/8.12.7) id q616E6Yh005754;
    Sun, 1 Jul 2012 14:14:06 +0800
    Date: Sun, 1 Jul 2012 14:14:06 +0800
    Message-Id: <[email protected]>
    To: barry_at_bloemonline.co.za
    Subject: EFT Payment Received!
    From: ABSA <[email protected]>
    Reply-To:
    MIME-Version: 1.0
    Content-Type: multipart/mixed; boundary=9323675DAC9943D878CB9A7813AF8BB2
    X-EsetId: 02AA5D2303E7B83156EF02
     
  2. cfoe

    cfoe ISPConfig Developer ISPConfig Developer

    Is this a local mailbox?
     
  3. Barryvdw

    Barryvdw New Member

    No its not
     
  4. cfoe

    cfoe ISPConfig Developer ISPConfig Developer

  5. Barryvdw

    Barryvdw New Member

    For sure it is spam ... but how are they sending from my own server to me.. and how do I stop this ?
     
  6. cfoe

    cfoe ISPConfig Developer ISPConfig Developer

    post the email header on the side and you see that it is not coming from localhost!!

    It is coming from 220.130.202.172 from Taiwan.
     

Share This Page