Koozali.org: home of the SME Server

Spam over SMA 5.5 smtp from other domain !!!

Giedrius

Spam over SMA 5.5 smtp from other domain !!!
« on: September 24, 2002, 11:24:09 AM »
I give the error message from postmaster:


Hi. This is the qmail-send program at MYDOMAIN.XX.
I tried to deliver a bounce message to this address, but the bounce bounced!

<163@789.com>:
207.192.181.135 does not like recipient.
Remote host said: 550 <163@789.com>... User unknown
Giving up on 207.192.181.135.

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 4928 invoked for bounce); 24 Sep 2002 05:20:51 -0000
Date: 24 Sep 2002 05:20:51 -0000
From: MAILER-DAEMON@MYDOMAIN.XX
To: 163@789.com
Subject: failure notice

Hi. This is the qmail-send program at MYDOMAIN.XX.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <163@789.com>
Received: (qmail 4925 invoked by alias); 24 Sep 2002 05:20:50 -0000
Delivered-To: alias-localdelivery-NOUSER@MYDOMAIN.XX
Received: (qmail 4922 invoked from network); 24 Sep 2002 05:20:36 -0000
Received: from unknown (HELO pc-5.) (61.48.16.7)
  by MYDOMAIN.XX (AAA.BBB.CCC.DDD) with SMTP; 24 Sep 2002 05:20:36 -0000
x-esmtp: 0 0 1
Message-ID: <3266185-220021022913203906@pc-5>
To: "NEW020913-400000-500000" <163@789.com>
From: "ÖйشåºÄ²Ä³Ç" <163@789.com>
Subject: ÖйشåºÄ²Ä³Ç(¶©¹ºÈÈÏߣº62567625¡¢62526139)
Date: Tue, 29 Oct 2002 21:20:03 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_84815C5ABAF209EF376268C8"

------=_NextPart_84815C5ABAF209EF376268C8
Content-type: text/plain; charset=gb2312
Content-Transfer-Encoding: quoted-printable



------=_NextPart_84815C5ABAF209EF376268C8
Content-Type: text/html; charset=gb2312
Content-Transfer-Encoding: quoted-printable




 ..................................................>

Whats wrong ???

Jon Blakely

Re: Spam over SMA 5.5 smtp from other domain !!!
« Reply #1 on: September 24, 2002, 04:58:00 PM »
Nothing,

You recieved a junk email for a user that doesn't exist on your server. Your server sent a message back to the senders server to say the user does't exist. The senders server sent a back to your server saying the sender who sent the original email to you doesn't exist on his server. Its called a bounced-bounce.

Chances are the server that sent you the original e-mail has been compromised and is relaying.

Jon