[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Possible spammer or what?
- Subject: Re: [cobalt-users] Possible spammer or what?
- From: Bill Gunning <bgunning@xxxxxxxxxxxxxxx>
- Date: Tue Aug 21 05:08:06 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
Do you have a formmail script on the server?
http://www.mailvalley.com/formmail
Bill
>We had some problems with spam a while ago so now I am keeping an eye on the
>maillog. When I was looking at it I noticed something odd. Below are the 2
>lines in the maillog.
>Aug 20 18:25:37 admin sendmail[19917]: f7KNPb419917: from=admin, size=1556,
>class=0, nrcpts=7, msgid=<200108202325.f7KNPb419917@xxxxxxxxxxxxxxxxxx>,
>relay=admin@localhost
>Aug 20 18:25:38 admin sendmail[19919]: f7KNPb419917:
>to=ericweng@xxxxxxx,swalker299@xxxxxxx,oepepper@xxxxxxx,ericwenger@xxxxxxx,o
>eperez@xxxxxxx,maripos911@xxxxxxx,maripos977@xxxxxxx, ctladdr=admin
>(110/27), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=211556,
>relay=mailin-03.mx.aol.com. [205.188.156.186], dsn=2.0.0, stat=Sent (OK)
>
>Are these coming from the admin account? We have only 3 IP's that are
>allowed to use the server to send mail. How are these getting through?
>Something similar to these showed up earlier too. Can anyone help me
>understand what is going on.
>Kody Hagen