Mailing List SIMS@mail.stalker.com Message #6363
From: Nick Quinn <nquinn@acm.org>
Subject: spam via mx secondary
Date: 02 Jul 2000 12:00:03 +1000
To: <SIMS@mail.stalker.com>
X-Mailer: QuickMail Pro 2.0.4 (Mac)
hi,

I have just installed SIMS 1.8b8:

>10:23:20 1 SMTP-768(postoffice.telstra.net) SPAM? Recipient'<MuratSex@email.tc>' rejected: sending host is blacklisted

> 10:23:21 1 SMTP-788([203.50.1.76]) SPAM? Host is in the Blacklist

> 10:23:21 2 SMTP-788([203.50.1.76]) SPAM? Host is banned for another 402 seconds

"postoffice.telstra.net" is our secondary mx server!

"MuratSex@email.tc" does not exist (we own and operate the domain "email.tc".

"203.50.1.76" is "postoffice.telstra.net"

it appears that we have chosen a "bad" secondary.

what will happen when we become available after an outage? will we reject our own mail?

later I noticed:

>10:23:57 1 SMTP-806(mts1.internic.net) SPAM? Recipient '<MustafaSexBomb@email.tc>' rejected: sending host is blacklisted
> 10:23:59 1 SMTP-808([198.41.1.234]) SPAM? Host is in the Blacklist
> 10:23:59 2 SMTP-808([198.41.1.234]) SPAM? Host is banned for another 100 seconds

looks a bit like they are using both our secondary mx and internic.net (internic.net= 198.41.1.234), or is this what is called "spoofing"?

...'spose its a bad time of the year to be asking our colonial brethren :-)

Nick Quinn
Sunshine Beach Software in OZ

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster