Hi again Fritz, Thanks for this :
> >Can I do something to remedy this ? > > You have to find the intruder. > > Look into the header of such a mail: you will see many Received headers. It > goes multiple times through your servers. This is a header from an e-mail initiated in the internal domain to the internal domain : ------------------------------------------------ X-Assp-Version: 1.7.5.7(1.0.07) on mailgate.domain.gr X-Assp-ID: mailgate.domain.gr 17742-01546 X-Assp-Intended-For: us...@domain.gr X-Assp-Envelope-From: us...@domain.gr received: from [10.0.10.29] ([10.0.10.29] helo=[10.0.10.29]) with IPv4:25 by mailgate.domain.gr; 22 May 2013 13:15:42 +0300 Message-ID: <519c9acb.2060...@domain.gr> Date: Wed, 22 May 2013 13:15:39 +0300 From: User B <us...@domain.gr> User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: user A <us...@domain.gr> Subject: Fwd: special offer for june References: <9C9D3732512F4779A8D680C19B839BD4@receptionpc> In-Reply-To: <9C9D3732512F4779A8D680C19B839BD4@receptionpc> X-Forwarded-Message-Id: <9C9D3732512F4779A8D680C19B839BD4@receptionpc> Content-Type: multipart/alternative; boundary="------------050707000807000400000208" This is a multi-part message in MIME format. --------------050707000807000400000208 Content-Type: text/plain; charset=ISO-8859-7; format=flowed Content-Transfer-Encoding: 7bit -------- Original Message -------- Subject: special offer for june Date: Wed, 22 May 2013 11:29:08 +0300 From: Someone outside - Front Office <reservations@someone_outside.gr> To: user B <us...@domain.gr> Dear Partners, We would like to give you a special offer -15% valid from today for all new reservations, non cumulative with any other offer, for arrivals until 24/6. We hope that this offer will push your sales and we count on your support for an increase on your bookings. Best Regards ------------------------------------------------ (and so on) This is a message that got forwarded from user B to user A inside the same domain/subnet. I, for one, don't see anything suspicious in the mail headers. Regards and thank you, spyros ------------------------------------------------------------------------------ Try New Relic Now & We'll Send You this Cool Shirt New Relic is the only SaaS-based application performance monitoring service that delivers powerful full stack analytics. Optimize and monitor your browser, app, & servers with just a few lines of code. Try New Relic and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
