On Sat, 1 Aug 2009 11:04:35 -0400 "Terry Carmen" <te...@cnysupport.com> wrote:
> > > On Sat, 1 Aug 2009 10:02:54 -0400 > > "Terry Carmen" <te...@cnysupport.com> wrote: > > > >> > >> > I have received many emails in the last hour which were > >> > undeliverable, NOT sent by me. > >> > It seems someone is forging usernames in my domain > >> > Real-World-Systems.com as the "from:" and the "return-path:" . > >> > > >> > Received-From-MTA: dns;triband-mum-59.184.51.13.mtnl.net.in > >> > > >> > > >> > I have sent a message to ab...@mntl.net.in and > >> > helpd...@mtnl.net.in but no response. > >> > > >> > How does an MTA get blacklisted?? > >> > >> You'll probably never get a response, and even if you do, nothing > >> will happen. > >> > >> The easiest thing to do is configure your mail server use an RBL, > >> which would have stopped this before you received it. > > > > No it wouldn't. triband-mum-59.184.51.13.mtnl.net.in is almost > > certainly an infected PC, and the backscatter is coming from > > third-party servers. > > > The IP address is listed on almost two dozen RBLs. sure, but the original poster wrote: "I have received many emails in the last hour which were undeliverable, NOT sent by me. It seems someone is forging usernames in my domain" In other words he is receiving backscatter. And Received-From-MTA is a standard DSN field set by the MTA generating the DSN.
