[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] speaking of spam...



On Wed, 7 Feb 2001, Carrie Bartkowiak wrote:

> Tonight my log literally *filled* up with this message:
> Feb  6 21:44:55 www sendmail[12415]: f174isD12415: ruleset=check_mail,
> arg1=<lance14@xxxxxxxxxxxxxx>, relay=mail.nizzy.ne.jp [211.123.33.12],
> reject=501 5.1.8 <lance14@xxxxxxxxxxxxxx>... Domain of sender address
> lance14@xxxxxxxxxxxxxx does not exist
> 
> This is one of those linux-newbie questions.
> Does the above line mean that this guy was trying to spam through my server,
> or does it mean that someone on my server was trying to send email to this
> guy?
> 
> I've got pages upon pages of that line.

Yes, it's spam, sendmail is rejecting it because the domain name of the
sender or the relay doesn't exist, probably because it's forged, (if it
was legit, it should exist since the sender is sending from there ;)

dig:
freepage4u.net. 11      SOA
ns.kernelpop.com.com. root.ns.kernelpop.com. (no A records found)

also seems to have a very confused nameserver -/

gsh