[Wylug-help] Help needed with trying to identify spammer

[James Holden]

Hi John,

On Tue, 2011-11-08 at 19:03 +0000, John Craven wrote:
> Hi Guys...
> 
> I have been notified that a spammer is sending mail through my server.
> I need help in finding out how this is happening.

Ouch. Can we get a full copy, including headers, of one of the spam
mails that's alleged to have come through your server. Use the mail
client's "forward as attachment" option, rather than the usual "inline"
forwarding which would not include the headers. Feel free to forward it
to me directly as well, because the mailing list will probably
(hopefully!) junk it.

To be honest, the usual explanation is that somebody is just spoofing
the "From" header and it's not coming through your server at all, but
we'll see.

James

> John C
> 
> 
> =================================================
> 
>    Check out our British Country Music Web Sites
> 
>          http://www.countrymusic.org.uk
>          http://www.bcmi-radio.co.uk
> 
>    Over 300,000 visitors a week
> 
> =================================================
> 
> 
> _______________________________________________
> Wylug-help mailing list
> Wylug-help at wylug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/wylug-help

-- 
James Holden                     Developer, SEO, Technology Consultant
http://jamesholden.net/                          Leeds, United Kingdom
http://twitter.com/jamesholden                            07989 702968
PGP key fingerprint: 32C9 A76F 3CFE A06C 1B00 5AAB 9877 4742 8358 863A
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.lug.org.uk/pipermail/wylug-help/attachments/20111108/5fdd9410/attachment.pgp>