Re: [SLUG] strange returned mail

From: Bob Stia (rnr@sanctum.com)
Date: Mon Mar 10 2008 - 21:33:48 EST


On Monday 10 March 2008 12:45:57 am Mario Lombardo wrote:
> Hmmm I used to get a lot of these types of returned messages (actually
> "returned SPAM") because some entity out there was using my email
> address in the FROM field, where in fact, they're using a completely
> different SMTP and POP/IMAP servers and will never get a reply back.
> They're just looking for a clear-GIF download to verify if a target
> email address is good, deploy a virus/trojan payload, phishing
> exploits, or a click-through to buy some... umm... bedroom happy candy.
> You'll probably get some nasty email from people though. Check out
> SPF. It may help you:
> http://en.wikipedia.org/wiki/Sender_Policy_Framework
>
> Find out what company is benefiting from this in the returned emails.
> They're probably the ones footing the bills to the "email marketing
> company" scumbags that provide this service. They may or may not be
> aware of the acts. You can also send the email with full headers to:
> spam@uce.gov
> http://www.ftc.gov/spam/
> https://rn.ftc.gov/pls/dod/wsolcq$.startup?Z_ORG_CODE=PU01
>
> /mario
>
> Bob Stia wrote:
> > Hello Sluggers,
> >
> > Am getting quite a few of these Failed Mail messaages lately. Don't know
> > what to make of it. I certainly didn't send it out.Anyone know what is
> > happening here?
> > -------------------------------------------------------------
> > This is the mail system at host lbox.org.
> >
> > I'm sorry to have to inform you that your message could not
> > be delivered to one or more recipients. It's attached below.
> >
> > For further assistance, please send mail to postmaster.
> >
> > If you do so, please include this problem report. You can
> > delete your own text from the attached returned message.
> >
> > The mail system
Mario, ronan, thanks for replying.

Mario - Can't see how I caan find out what ccompany is benefiting frrom this.
I certainly don't want to reply to that postmaster. And, isn't SPF for a
mail server? It sure looks complicated and way over my head.

Ronan - Yes it does look like it is trying to connect to my SMTP port but I
certainly don't have a zion@localhost. I don't have an /etc/ sendmail.cfg.
All my mail is handled directly by kmail. I guess I'll have to start looking
at them more closely.

Any more/other ideas would certainly be welcome.

Bob S.
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 15:20:15 EDT