Mailing List Message #15440
From: Bill Cole <>
Subject: Re: How did this spammer get through?
Date: Thu, 8 Feb 2007 09:44:46 -0500
To: SIMS Discussions <>
At 6:35 AM -0800 2/8/07, Anibal Escobar  imposed structure on a stream of electrons, yielding:
Hello everyone, I have a Sims 1.8b9d14 running with Relay for Clients only checked.  A couple of days, someone sent out a lot of spam through my server.  Here's a snippet from the log:

06:37:45 3 SMTP-658(User) Failed to verify. Real address is []
06:38:05 2 SMTP-658([]) {S.0005385044} received, 7094 bytes
06:38:05 2 SYSTEM [S.0005385044] S.0005385044 50+0
06:38:05 3 SMTP [S.0005385044] dequeueing

Any thoughts on how this could have happened?  Thanks, Anibal Escobar

If you are not logging any deeper than that, any response is theoretical and unverifiable.

The most likely thing is that you have a compromised user account, and the spammer has used POP-before-SMTP or SMTP AUTH  with some user's weak password.

Bill Cole                        

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster