"Kirti S. Bajwa" wrote:
>
> Hi:
>
> Somebody is using our company's mail server to send Spam mail. Following is
> a copy of the bounced message. I have received hundreds of these messages. I
> have looked into qmail-send logs and find bounced messages but the from
> address is "garbage".
>
> It seems that person who is sending SPAM is a regular dial-in customer. For
> example, the message below, this person logged in as a dial-in customer and
> was assigned an IP address of 63.113.255.43, which is a valid IP address for
> the dial-in modem bank.
>
> >From this message or from qmail-send logs, I can't find out the user id of
> this person. Is there any way I can stop it or better to find out who this
> person is (sending SPAM)?
>
> Kirti
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, May 16, 2001 3:17 PM
> To: [EMAIL PROTECTED]
> Subject: failure notice
>
> Hi. This is the qmail-send program at ns2.tibonline.net.
> I tried to deliver a bounce message to this address, but the bounce bounced!
>
> <[EMAIL PROTECTED]:
> Sorry, I couldn't find any host named centerfind.com
> --- Below this line is the original bounce.
>
> Return-Path: <>
> Received: (qmail 21618 invoked from network); 16 May 2001 19:16:59 -
> Received: from unknown (HELO pavilion) (63.113.255.43)
> by 63.113.255.3 with SMTP; 16 May 2001 19:16:59 -
> From: Hahaha <[EMAIL PROTECTED]>
> Subject: Snowhite and the Seven Dwarfs - The REAL story!
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="--VEXI78D6Z4DYZC9IVKXQNKPMFW9AR85UF"
>
> VEXI78D6Z4DYZC9IVKXQNKPMFW9AR85UF
> Content-Type: text/plain; charset="us-ascii"
>
> Today, Snowhite was turning 18. The 7 Dwarfs always where very educated and
> polite with Snowhite. When they go out work at mornign, they promissed a
> *huge* surprise. Snowhite was anxious. Suddlently, the door open, and the
> Seven
> Dwarfs enter...
> ... snip 8<
Kirti:
Check your radius.log to find out who was using that port at that time
and have them buy a virus scanner. He/She isn't sending SPAM, they're
just the victim of a worm.
--
Bob Greene
[EMAIL PROTECTED]
Pull my finger for my public key
