Hi
Have a strange problem! I keep getting spam e-mails that a system has been unable to deliver because of an error with the data header (same error all the times). It always have the same sender and receiver address if the name/user in front of the '@' sign is valid on the system. In case the user is not valid it have a different from address (my internet provider)
My question is if this spam mail is generated from my system and the system is used as a robot for spam mails (hope not) or my domains is just used by somebody else - but why then use the same to and from address????
Or is this some sort of bouncing mails?
The e-mails come to valid addresses but also to many random names in front of the domain.
I am unable to see in the logs if the mails come from my system in the first place (may be because I do not have enough knowledge)
Please help me out here!
Regards
Benny
NB: Each valid user gets around 25 mails pr. day
This is a valid address (have changed the user name)
Return-Path: <>
Delivered-To: ny@beastserver.beast.dk
Received: (qmail 3333 invoked by alias); 18 Jan 2009 08:04:41 -0000
Delivered-To: alias-localdelivery-ny@beast.dk
Received: (qmail 3330 invoked by uid 453); 18 Jan 2009 08:04:41 -0000
X-Virus-Checked: Checked by ClamAV on beast.dk
X-Spam-Status: No, hits=2.5 required=4.0
tests=RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK
X-Spam-Check-By: beast.dk
Received: from mail-gw.stofanet.dk (HELO mail-gw.stofanet.dk) (212.10.10.204)
by beast.dk (qpsmtpd/0.40) with ESMTP; Sun, 18 Jan 2009 09:04:39 +0100
Received: from mail by mail-gw.stofanet.dk with local id 1LOSe5-0002BF-Mr
for ny@beast.dk; Sun, 18 Jan 2009 09:04:37 +0100
X-Failed-Recipients: ny@beast.dk
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@mail-gw.stofanet.dk>
To: ny@beast.dk
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1LOSe5-0002BF-Mr@mail-gw.stofanet.dk>
Date: Sun, 18 Jan 2009 09:04:37 +0100
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
ny@beast.dk
SMTP error from remote mail server after end of data:
host beast.dk [212.10.104.90]: 552 Mail with no Date header not accepted here
------ This is a copy of the message, including all the headers. ------
Return-path: <ny@beast.dk>
Received: from ppp-58-8-92-117.revip2.asianet.co.th ([58.8.92.117] helo=ppp-58-8-91-15.revip2.asianet.co.th)
by mail-gw.stofanet.dk (envelope-from
<ny@beast.dk>)
with esmtp id 1LOSe3-0002B2-Hp
for ny@beast.dk; Sun, 18 Jan 2009 09:04:36 +0100
To: <ny@beast.dk>
Subject: So wet and so warm
From: "Accents In Advertising Incorporated" <ny@beast.dk>
MIME-Version: 1.0
Content-Type: text/html
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="
http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Accents In Advertising Incorporated Newsletter</title>
</head>
<body>
<p align="center"><font size="2" color="#808080">To unsubscribe from this
broadcast email, please scroll down to the bottom of the page. <br>
To view this email as a web page, <a href="
http://fnaqjs.hideximiw.cn/457df42d18ddd02e3.shtml">go here</a>.</font></p>
<div align="center">
<table border="0" width="715">
<tr>
<td>
<blockquote>
<p align="center"><a href="
http://colcj.hideximiw.cn/">
<img border="0" src="
http://imagez.hideximiw.cn/buddy.jpg" alt="Accents In Advertising Incorporated Newsletter" align="left"></a></p>
<br>
<p align="left"> </p>
<p align="left"><font color="#808080" size="2">Make sure our
emails end up in your inbox, not your bulk or junk folders. <br>
Simply add ny@beast.dk to your email address book or trusted-sender list.</font></p>
<p align="left"><font color="#808080"><font size="2">You are receiving this newsletter because you subscribed to
the Accents In Adve
This is an in-valid userReturn-Path: <>
Delivered-To: unknown@beastserver.beast.dk
Received: (qmail 9813 invoked by alias); 22 Jan 2009 13:41:41 -0000
Delivered-To: alias-localdelivery-unknown@beast.dk
Received: (qmail 9810 invoked by alias); 22 Jan 2009 13:41:41 -0000
Delivered-To: edmonj@beastserver.beast.dk
Received: (qmail 9807 invoked by alias); 22 Jan 2009 13:41:41 -0000
Delivered-To: alias-localdelivery-edmonj@beautyware.dk
Received: (qmail 9804 invoked by uid 453); 22 Jan 2009 13:41:41 -0000
X-Virus-Checked: Checked by ClamAV on beast.dk
X-Spam-Status: No, hits=2.5 required=4.0
tests=RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK
X-Spam-Check-By: beast.dk
Received: from mail-gw.stofanet.dk (HELO mail-gw.stofanet.dk) (212.10.10.204)
by beast.dk (qpsmtpd/0.40) with ESMTP; Thu, 22 Jan 2009 14:41:38 +0100
Received: from mail by mail-gw.stofanet.dk with local id 1LPzoP-0006jT-G4
for edmonj@beautyware.dk; Thu, 22 Jan 2009 14:41:37 +0100
X-Failed-Recipients: edmonj@beautyware.dk
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@mail-gw.stofanet.dk>
To: edmonj@beautyware.dk
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1LPzoP-0006jT-G4@mail-gw.stofanet.dk>
Date: Thu, 22 Jan 2009 14:41:37 +0100
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
edmonj@beautyware.dk
SMTP error from remote mail server after end of data:
host beautyware.dk [212.10.104.90]: 552 Mail with no Date header not accepted here
------ This is a copy of the message, including all the headers. ------
Return-path: <edmonj@beautyware.dk>
Received: from net-93-147-58-67.t2.dsl.vodafone.it ([93.147.58.67])
by mail-gw.stofanet.dk (envelope-from
<edmonj@beautyware.dk>)
with smtp id 1LPzoK-0006W3-Nt
for edmonj@beautyware.dk; Thu, 22 Jan 2009 14:41:36 +0100
To: <edmonj@beautyware.dk>
Subject: Welcome to eBay!
From: <edmonj@beautyware.dk>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY bgcolor="#B1B1B1"><div style="padding: 20px 20px 40px 20px; background-color:#B1B1B1;">
<table width="450" border="0" cellspacing="0" cellpadding="0" align="center" bgcolor="#ffffff">
<tr>
<td style="padding:10px 10px 10px 10px; font-family:'Trebuchet MS', Arial, Helvetica, sans-serif; font-size:20px; color:#000000;" >
We ship Worldwide! To all countries! To all destinations!</td>
</tr>
<tr> <td style="padding:10px 0px 30px 0px;">
<div style="padding:10px 10px 10px 10px;">
<div style="border-top:5px solid #666666; padding-top:10px; font-family:Verdana, Arial, Helvetica, sans-serif; font-size:10px; color:#666666;">
<a href="
http://courageoffice.com/"><img src="
http://courageoffice.com/sdjbvsj.gif" alt="Cant see a picture? Click Here!" border="0"
class="featureImage" style="padding:100px 100px 100px 100px;" /></a>
</div> </td>
</tr>
<tr>
<td style="padding:20px 10px 10px 0px; background-color:#B1B1B1;">
<p style="font-family:Verdana, Arial, Helvetica, sans-serif; font-size:9px; color:#666666;">
To unsubscribe from this mailing list, please log in to
www.courageoffice.com, click on "My Account",
click "Update" to edit your registration details and uncheck the "Receive Newsletter?" check box.<br>
Or unsubscribe at
<a href="
http://courageoffice.com/faq.php" style="font-weight:bold; color:#666666">
http://courageoffice.com/faq.php</a>
</p>
<p style="font-family:Verdana, Arial, Helvetica, sans-serif; font-size:9px; color:#666666;">
<a href="
http://courageoffice.com/privacy_policy.php" style="font-weight:bold; color:#666666">Privacy Statement</a> |
<a href="
http://courageoffice.com/shipping_policy.php" style="font-weight:bold; color:#666666">Terms & Conditions</a> |
<a href="
http://courageoffice.com/contacts.php" style="font-weight:bold; color:#666666">Contact</a>
</p>
<p style="font-family:Verdana, Arial, Helvetica, sans-serif; font-size:9px; color:#666666;">
BRANDKEYWORD Ltd.<br>
Tower Bridge Business Complex. Unit 1, B891. 581 Clements Road. London. SE58 6DG
</p>
<p style="font-family:Verdana, Arial, Helvetica, sans-serif; font-size:9px; color:#666666;">
© 2006-2008 BRANDKEYWORD, Ltd. All Rights Reserved
</p></td> </tr></table></div></BODY></HTML>
11 Replies
14313 Views