[Beds] Mail server spoofing problem

Lee Larcombe leelarcombe at hotmail.com
Tue Oct 17 13:37:07 BST 2006


Hi all

I have a problem with my domain being used as a spam return address - I keep
getting undelivered mail messages like the one below:

======================================================
This is an automatically generated Delivery Status Notification

Delivery to the following recipient failed permanently:

     edmundo at paycounter.com

Technical details of permanent failure:
PERM_FAILURE: Mail quota exceeded

   ----- Original message -----

Received: by 10.35.60.15 with SMTP id n15mr9678404pyk;
        Sat, 14 Oct 2006 22:03:18 -0700 (PDT)
Return-Path: <yhnwi at larcombe-it.co.uk>
Received: from tukdw ([220.175.215.233])
        by mx.google.com with SMTP id f19si2495154pyf.2006.10.14.22.03.16;
        Sat, 14 Oct 2006 22:03:18 -0700 (PDT)
Received-SPF: neutral (google.com: 220.175.215.233 is neither permitted nor
denied by best guess record for domain of yhnwi at larcombe-it.co.uk)
Received: from 220.175.169.77 ([220.175.169.77])
    by tukdw (8.13.3/8.13.3) with SMTP id k9F5C79m019071;
    Sun, 15 Oct 2006 13:12:07 +0800
Message-ID: <4531C10D.6010407 at larcombe-it.co.uk>
Date: Sun, 15 Oct 2006 13:03:09 +0800
From: Silvia Belcher <yhnwi at larcombe-it.co.uk>
User-Agent: Thunderbird 1.5.0.7 (Windows/20060909)
MIME-Version: 1.0
To: edmundo at paycounter.com
Subject: cymbal alligator
Content-Type: multipart/related;
 boundary="------------080406010003060602010002"

This is a multi-part message in MIME format.
======================================================

My domain is larcombe-it.co.uk but the server hosting that domain (with a
mailserver) is at 217.160.223.183. The mailserver is set up to not relay
anything but a couple of domains hosted on the server - larcombe-it.co.uk is
not even one of them.

I assume someone is using my domain as the return address on their spam
emails. Has anyone else had this before? I can't think of a solution other
than just treating these bounce-backs like spam and filtering them out.

Any ideas?

============================
Lee Larcombe

www.larcombesplace.org.uk
msn: leelarcombe at hotmail.com






More information about the Beds mailing list