Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-31 Thread Julian Gilbey
Hi Greg, On Thu, Mar 30, 2023 at 07:18:15AM -0400, Greg Wooledge wrote: > On Thu, Mar 30, 2023 at 12:00:01PM +0300, Reco wrote: > > On Thu, Mar 30, 2023 at 09:30:49AM +0100, Julian Gilbey wrote: > > > I wonder if anyone has any idea about how to track this down? > > > > I'd check

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-31 Thread Julian Gilbey
Hi Reco, On Thu, Mar 30, 2023 at 02:34:29PM +0300, Reco wrote: > Hi. > > On Thu, Mar 30, 2023 at 12:19:24PM +0100, Julian Gilbey wrote: > > The log seems quite unhelpful here, though I may be missing > > something. Here is an example: > > I disagree. There's nothing to miss here, thus

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Reco
Hi. On Thu, Mar 30, 2023 at 12:19:24PM +0100, Julian Gilbey wrote: > The log seems quite unhelpful here, though I may be missing > something. Here is an example: I disagree. There's nothing to miss here, thus you're correct. > 2023-03-29 00:07:19 1phIPT-0047NQ-0H <= <>

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Julian Gilbey
Hi Jeremy! On Thu, Mar 30, 2023 at 05:03:47PM +0800, Jeremy Ardley wrote: > > On 30/3/23 16:30, Julian Gilbey wrote: > > I'm getting a significant number of spam messages being sent to my MTA > > (exim) for the address FRPJXbKeKuek at sport.qc.ca, and now I'm > > starting to see some sent to

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Julian Gilbey
On Thu, Mar 30, 2023 at 12:00:01PM +0300, Reco wrote: > Hi. > > On Thu, Mar 30, 2023 at 09:30:49AM +0100, Julian Gilbey wrote: > > I wonder if anyone has any idea about how to track this down? > > I'd check /var/log/exim4/mainlog first, obviously. > For instance, your mail was sent to my

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Greg Wooledge
On Thu, Mar 30, 2023 at 12:00:01PM +0300, Reco wrote: > On Thu, Mar 30, 2023 at 09:30:49AM +0100, Julian Gilbey wrote: > > I wonder if anyone has any idea about how to track this down? > > I'd check /var/log/exim4/mainlog first, obviously. In addition to that, open one of the spam messages in a

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Reco
Hi. On Thu, Mar 30, 2023 at 09:30:49AM +0100, Julian Gilbey wrote: > I wonder if anyone has any idea about how to track this down? I'd check /var/log/exim4/mainlog first, obviously. For instance, your mail was sent to my MTA by bendel.d.o, as is should be: $ grep

Re: Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Jeremy Ardley
On 30/3/23 16:30, Julian Gilbey wrote: I'm getting a significant number of spam messages being sent to my MTA (exim) for the address FRPJXbKeKuek at sport.qc.ca, and now I'm starting to see some sent to www-data at aether.toine.be. What is disturbing is that the machine is on a local network,

Strange locally-originating spam messages from sport.qc.ca

2023-03-30 Thread Julian Gilbey
I'm getting a significant number of spam messages being sent to my MTA (exim) for the address FRPJXbKeKuek at sport.qc.ca, and now I'm starting to see some sent to www-data at aether.toine.be. What is disturbing is that the machine is on a local network, and my internet-facing router does not