Re: returned mail in my outbox

From: W.D.McKinney <deem@wdm.com>
Date: Sat Jul 17 2004 - 01:34:18 AKDT

On Thu, 2004-07-15 at 19:57, Greg Madden wrote:
> The following is the header from an email in my outbox in Kmail. I have
> started to get a few of these per day (in my outbox). I hope this
> doesn't mean someone is actually using me to send spam but maybe a
> spoof of my address
>
> X-KMail-Identity: 0
> To: <0c2oi.qpk8a@hotmail.com>
> Date: Thu, 15 Jul 2004 01:38:44 -0800
> Subject: mail failed, returning to sender
> From: MAILER-DAEMON@ms31.hinet.net
> References: <OFB6DE19E8.572FC45A-ONC1256ED2.00359372@allauch.lan>
> Message-Id: <200407150138.44742.MAILER-DAEMON@ms31.hinet.net>
> Status: R
> X-Status: NQ
> X-KMail-EncryptionState:
> X-KMail-SignatureState:
> X-KMail-MDN-Sent:
>
> |------------------------- Message log follows:
> -------------------------|
> no valid recipients were found for this message
> |------------------------- Failed addresses follow:
> ---------------------|
> hi046580@ms31.hinet.net
> |------------------------- Message text follows:
> ------------------------|
> Return-path: <0c2oi.qpk8a@hotmail.com>
> Return-path: <0c2oi.qpk8a@hotmail.com>
> Received: from mta-1.gci.net (mta-1.gci.net [208.138.130.82])
> by ems-1.gci.net (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar
> 18
> 2003)) with ESMTP id <0I0V002M4ZX90J@ems-1.gci.net> for
> gomadtroll@ims-ms-daemon; Thu, 15 Jul 2004 01:34:43 -0800 (AKDT)
> Received: from psmtp.com (exprod6mx72.postini.com [12.158.36.56])
> by mta-1.gci.net
> (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003)) with
> SMTP id
> <0I0V001UNZWXLQ@mta-1.gci.net> for gomadtroll@gci.net
> (ORCPT gomadtroll@gci.net); Thu, 15 Jul 2004 01:34:10 -0800 (AKDT)
> Received: from source ([81.255.80.75]) by exprod6mx72.postini.com
> ([12.158.35.251]) with SMTP; Thu, 15 Jul 2004 04:33:55 -0500 (CDT)
> Received: from 144.96.6.7 ([219.80.9.74])
> by srvdata.allauch.lan (Lotus Domino Release 5.07a)
> with SMTP id 2004071511444010:392 ; Thu, 15 Jul 2004 11:44:40 +0200
> Date: Thu, 15 Jul 2004 17:49:01 +0800
> From: 0c2oi.qpk8a@hotmail.com
> Subject: =?Big5?B?CAcUs3EHuUwPTGludXgQu3sFw9IEpbICs8YQuOoQrsYFEBQ=?=
> Sender: 0c2oi.qpk8a@hotmail.com
> To: hi046580@ms31.hinet.net
> Reply-to: 0c2oi.qpk8a@hotmail.com
> Message-id: <OFB6DE19E8.572FC45A-ONC1256ED2.00359372@allauch.lan>
> MIME-version: 1.0
> X-MIMEOLE: Produced By Mircosoft MimeOLE V6.00.2600.0000
> Content-type: text/html; charset=BIG-5; charset=BIG-5
> Content-transfer-encoding: 8BIT
> X-MIMETrack: Itemize by SMTP Server on serveur1/Allauch(Release 5.07a |
> May 14,
> 2001) at 15/07/2004 11:45:11, Serialize by Router on
> serveur1/Allauch(Release
> 5.07a |May 14, 2001) at 15/07/2004 11:45:33,
> Serialize complete at 15/07/2004 11:45:33
> Original-recipient: rfc822;gomadtroll@gci.net

Typical spam but it shouldn't be in your outbox.

And for "hinet.net" see http://www.akwireless.net/hinet.htm
Of course most of RBL's & Bayesian filters already take of spoofed stuff
via the Barracuda Firewall. For this in your outbox, start by looking at
all your logs.

Cheers,
Dee

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Sat Jul 17 01:27:08 2004

This archive was generated by hypermail 2.1.8 : Sat Jul 17 2004 - 01:27:09 AKDT