It just looks like someone is using your email server as a relay server but I'll let the experts answer...that's just my opinion.
> -----Original Message----- > From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]] > Sent: Friday, June 14, 2002 2:44 PM > To: MS-Exchange Admin Issues > Subject: Help, somebody is spoofing my domain name? > > > We recently began receiving spam from our own domain. A quick look at the > headers and I can tell that the message is coming from the outside. I > have > sent the headers to my ISP but, my rep says that I'll probably have to > contact an attorney for any recourse. I would like some help to make sure > I > have correctly read these headers and would appreciate any suggestions to > correct this situation. > > Thank for your help. I am at a loss as to my next step. > > Brad J. Peer > > Header #1 - Near as I can tell this ends up in India somewhere. > > Received: from mx20b.rmci.net ([205.162.184.38]) by pglws.presnellgage > with > SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) > id M6SK7NF3; Fri, 14 Jun 2002 08:14:50 -0700 > Received: (qmail 27445 invoked from network); 14 Jun 2002 15:15:43 -0000 > Received: from unknown (HELO ?domain) (203.200.71.4) > by mx20.rmci.net with SMTP; 14 Jun 2002 15:15:43 -0000 > From: [EMAIL PROTECTED] > X-Encoding: MIME > Received: from presnellgage.com by X182JL1R.presnellgage.com with SMTP for > [EMAIL PROTECTED]; Fri, 14 Jun 2002 11:20:37 -0500 > Date: Fri, 14 Jun 2002 11:20:37 -0500 > Content-Type: multipart/alternative; > boundary="----=_NextPart_1120_858227704087436622371446" > X-Priority: 3 (Normal) > Importance: Normal > Content-Transfer-Encoding: quoted-printable > Reply-To: [EMAIL PROTECTED] > Message-Id: <[EMAIL PROTECTED]> > X-MSMail-Priority: Normal > Subject: Stop paying TOO MUCH for Life Insurance! > X-Sender: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > MIME-Version: 1.0 > > Header # 2 - Tiapei, Tiawan? > > Received: from mx20a.rmci.net ([205.162.184.37]) by pglws.presnellgage > with > SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) > id LMJFQDCN; Wed, 5 Jun 2002 16:46:11 -0700 > Received: (qmail 21500 invoked from network); 5 Jun 2002 23:46:35 -0000 > Received: from 26.c210-85-84.ethome.net.tw (HELO ?domain) (210.85.84.26) > by mx20.rmci.net with SMTP; 5 Jun 2002 23:46:35 -0000 > To: [EMAIL PROTECTED] > From: [EMAIL PROTECTED] > Received: from presnellgage.com by 61IFS.presnellgage.com with SMTP for > [EMAIL PROTECTED]; Wed, 05 Jun 2002 19:51:59 -0500 > Date: Wed, 05 Jun 2002 19:51:59 -0500 > Reply-To: [EMAIL PROTECTED] > Message-Id: <[EMAIL PROTECTED]> > X-Priority: 3 (Normal) > Content-Transfer-Encoding: quoted-printable > Content-Type: multipart/alternative; > boundary="----=_NextPart_120_5884168311016778101044" > Subject: You're Paying Too Much > X-Encoding: MIME > MIME-Version: 1.0 > > > > List Charter and FAQ at: > http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
