Kenneth Kixmoeller/fh wrote:
> Hey -= == ==
> 
> I'm just curious what's going on....
> 
> I flipped my KVM switch over to my server (for no particular reason),  
> and noticed my eMail server going wild. Somebody is sending mail  
> after mail to my server, to made-up users in my domain. the user  
> names aren't random, they all start with "shethang," for example:  
> [EMAIL PROTECTED], [EMAIL PROTECTED],  
> [EMAIL PROTECTED] and on and on.  All of the "from" IP's and domains  
> are being spoofed, so I can't blacklist any of it.

If you look up the 'from' chain, you'll eventually see the starting 
point of the email (the 'envelope', so to speak.) Are they all the same 
(probably likely) or different?

Whil


_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to