Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Black on June 18, 2005, 02:12:24 PM

Title: is my mail server sending spam?
Post by: Black on June 18, 2005, 02:12:24 PM

I keep getting these messages in my mail with my username or something like admin@mysite.com, register@mysite.com or webmaster@mysite.com etc.. each one of these has an attachment worm.

"We attached some important information regarding your account."

I got Spamassasin installed..

WTF?

Title: is my mail server sending spam?
Post by: DarkMirage on June 18, 2005, 07:58:05 PM

Quote from: "Knuddi"

Please notice that the admin account is not being scanned by the Spam Filter.

The Swerts-Knudsen Howto (http://"http://sme.swerts-knudsen.com/index.html?frame=http%3A//sme.swerts-knudsen.com/howtos/howto_29.htm")

Don't know about your username...is it redirected to admin?

Title: is my mail server sending spam?
Post by: Black on June 18, 2005, 08:56:22 PM

I ended up following what he said which was to make up another name and have the admin email routed through that.

Title: Re: is my mail server sending spam?
Post by: CharlieBrady on June 18, 2005, 10:49:48 PM

Quote from: "Black"

I keep getting these messages in my mail with my username or something like admin@mysite.com, register@mysite.com or webmaster@mysite.com etc.. each one of these has an attachment worm.

"We attached some important information regarding your account."

These are most likely messages with forged headers which have been sent by a virus. Examine the full headers of the message to learn where in the world the messages come from. I'm sure there are a dozen tutorials on the internet about how to interpret full mail headers.