Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: Derek on January 02, 2005, 12:45:20 AM
-
I dont know what happened, but starting yesterday i started getting postmaster emails to my admin account telling me viruses were in emails addressed to the following.
myname@home.com
mname@home.com
here@home.com
etc etc etc..... this is not the real domain info but it seems to be addressed to the prefix of people that i know the followed by the domain, as well as people i dont know and variations of the people i know..I have 5 domains on my server but i am getting like 50 a day of virus attempts on just one domain name.
Does anyone have any ideas what or who would be causing this? I have looked at my mail logs (something i dont usually do or understand) but there is a huge amount of emails being sent, so it appears from my server but not from me.
Any help would be appreciated...
Derek
-
Hello Derek,
I had something like that a while ago as well ... both at my work server and my home server .. both run SME.
I put it down to one of the people who work at my work who has about 20 people on his mail list and sends jokes to from his home machine ... there are a few people at work as well as myself he sends to.
The problem wasn't him ... it was one of the people on his list was infected.
The way I found out is that I gave him a test e-mail to put onto his list ... and sure enough virus e-mails started coming to that one as well ... I even got a virus mail from my work machine to my home machine ... lol ... not likely as we have heavy virus protection and anti-spyware protection as well.
Never did find out who was infected but the virus e-mails started to fade away now ... only get one third of what we used to.
I get a lot of Auto-Mailer@xxx, Error_Mail@xxx, hostmaster@xxx & info@xxx etc ... xxx = various domains.
If I'm wrong in my presumtion please let me know but thats what I found.
Tib