Mail system Pet Peeve.

From: Matthew Schumacher <schu@schu.net>
Date: Wed Jun 15 2005 - 08:10:52 AKDT

I really hate when this happens. This mail system allowed one of their
users to send an email that was spoofed from webmaster@aptalaska.net to
fred@aptalaska.net that contained a virus. When larry.aptalaska.net
rejected it (in smtp) relay3.mail.twtelecom.net went ahead and sent the
bounce message to webmaster.

I'm don't know that much can be done about this, except force each of
your users to authenticate then reject mail from your domain unless the
user authenticated. I have this running at one mail system I manage,
but it breaks things like ebay trying to send you notifications from
your own address.

Anyone else have any ideas on how to stop spoofing? Getting undelivered
notifications from spoofing viruses is starting to get old.

schu

=======================================================================

This is the Postfix program at host relay3.mail.twtelecom.net.

I'm sorry to have to inform you that your message could not be
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                        The Postfix program

<fred@aptalaska.net>: host larry.aptalaska.net[64.186.96.3] said: 554 5.7.1
    Message contains Worm.Mytob.CW virus, rejected (in reply to end of DATA
    command)

Reporting-MTA: dns; relay3.mail.twtelecom.net
X-Postfix-Queue-ID: 264674E22
X-Postfix-Sender: rfc822; webmaster@aptalaska.net
Arrival-Date: Wed, 15 Jun 2005 04:31:06 -0500 (CDT)

Final-Recipient: rfc822; fred@aptalaska.net
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host larry.aptalaska.net[64.186.96.3] said: 554
    5.7.1 Message contains Worm.Mytob.CW virus, rejected (in reply to end of
    DATA command)
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Jun 15 08:10:49 2005

This archive was generated by hypermail 2.1.8 : Wed Jun 15 2005 - 08:10:50 AKDT