We have been running SIMS for a while and have never seen anything like this.
We are getting tons of spam. It always has the kx100.net domain in the from address but always comes from widely varying IP addresses.
You can feel safe adding this to your router:
kx100.net = error
any domain that is registered with 'contact' info like this is not someone you want to accept mail from:
Administrative Contact: lhf ming liu ([EMAIL PROTECTED]) 860455666666 Fax: none Afghanistan Afghanistan, 66666 AF
Of course, whacking them in the router will only catch the envelope sender (i.e. Return-Path) so if the mail is using different addresses in From and envelope, thjat won't stop it.
It also seems to be accepted by SIMS even tho we have relay for client hosts only. We have tried turning off the SMTP allowed after POP and AUTH, but the mail is still coming in.
Is it relaying or delivering locally?? The relay controls only control relaying. Anyone can deliver to your local mailboxes.
The Recieved line says it is for addresses in domains which we don't handle (like compuserve, etc.)
We cannot figure out why this mail is being accepted by SIMS.
Any ideas?
It's hard to say much without an example.
-- Bill Cole [EMAIL PROTECTED]
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
