[cobalt-users] Someone is using my server to spam :<

["Jason Aspinall" <jaspinall@xxxxxxxxxxxxxxx>]

I'm getting all sorts of problem emails in the admin account on my Qube2 :|
Below is the header of one such posting, which shows that they are using a
sub-domain of lion-breath.com.  Now, the Qube2 is setup to "Receive email
addressed to these hosts/domains" and in the box alongside this parameter is
"lion-breath.com"....  If I leave this box empty, then local internal email
gets routed to our ISP, and the 15 min collection delay becomes very
apparent when sending mail to colleagues.

Is there any way I can bar people from using sub-domains of lion-breath.com
in the control panel of the Qube2?

***START HEADER***
Return-Path: <pj1fHp035@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Received: from localhost (localhost [127.0.0.1])
 by qube1.lion-breath.com (8.9.3/8.9.2) with ESMTP id SAA27122
 for <postmaster@localhost>; Thu, 30 Nov 2000 18:33:07 GMT
Received: from pop3.mail.demon.net
 by localhost with POP3 (fetchmail-4.7.4)
 for postmaster@localhost (multi-drop); Thu, 30 Nov 2000 18:33:07 +0000
(GMT)
Received: from punt-1.mail.demon.net by mailstore for
thecadman@xxxxxxxxxxxxxxx
          id 975608815:10:20804:0; Thu, 30 Nov 2000 18:26:55 GMT
Received: from ri.regioninfo.cz ([195.47.116.13]) by punt-1.mail.demon.net
           id aa1128692; 30 Nov 2000 18:26 GMT
Received: from Gv7431JcT (ppp-hou-02-6.algx.net [216.99.244.70]) by
regioninfo.regioninfo.cz with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.2650.21)
 id XY4ZCQTW; Thu, 30 Nov 2000 19:27:53 +0100
DATE: 30 Nov 00 12:23:05 PM
FROM: pj1fHp035@xxxxxxxxxxxxxxxxxxxxxxxxxx
Message-ID: <4wFj13E78t>
SUBJECT: It's your choice
X-Fetchmail-Warning: no recipient addresses matched declared local names
X-UIDL: +M$"!*5i!!JO+!!@nC"!

Look, we don't want to waste your time.... or ours

You must be determined to earn a bare minimum of 10,000 in the next
30-45 days abd to develop a net worth of over 1 million dollars cash

***END HEADER***

Could it as easy as putting *.lion-breath.com in the "Block email from these
users/hosts/domains" ? Or will it mean that I have to enter each sub-domain
in this box as and when they start using other subs?

Yours, very confused :|

--
Jason Aspinall
Asst Network Admin
Lion Laboratories Limited, Barry, UK, CF63 2BE
Tel +44(0)1446 744244 Fax +44(0)1446 720937