Re: AOL postmaster errors

[Reto Inversini]

Title: Message

Hi,   As someone already statet, most probably a forged e-mail address ... if you are running a webserver on this box, I would also check for vulnerable scripts that could be abused to send out mails, eg. formail.pl ...   Regards   Reto Inversin ----- Original Message ----- From: Sethi, Ali To: MS-Exchange Admin Issues Sent: Friday, April 19, 2002 9:51 PM Subject: AOL postmaster errors Has anyone seen this before?  It looks like someone is using a mailbox from one of our users and sending all kinds of emails out.  We have NAV for Exchange blocking all attachements that are suspect to be virus attachments.  The users is complaining that she is getting a ton of these post master errors.  Any suggestions on how to eliminate this?  We are not setup as relaying. Exhange 5.5 sp4 Windows 2k sp2 sr1   Thanks,     The original message was received at Fri, 19 Apr 2002 15:04:36 -0400 (EDT) from logs-wq.proxy.aol.com [205.188.200.132]     *** ATTENTION ***   Your e-mail is being returned to you because there was a problem with its delivery.  The address which was undeliverable is listed in the section labeled: "----- The following addresses had permanent fatal errors -----".   The reason your mail is being returned to you is listed in the section labeled: "----- Transcript of Session Follows -----".   The line beginning with "<<<" describes the specific reason your e-mail could not be delivered.  The next line contains a second error message which is a general translation for other e-mail servers.   Please direct further questions regarding this message to your e-mail administrator.   --AOL Postmaster          ----- The following addresses had permanent fatal errors ----- <[EMAIL PROTECTED]>      ----- Transcript of session follows ----- 550 <[EMAIL PROTECTED]>... Host unknown (Name server: sabertooth.victim.net: host not found) List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm