Returned mail... am i relaying? aaugh!

will trillich Mon, 27 Jan 2003 10:13:24 -0800

does this [see attachment] indicate that some spammer has found
a way to get me to relay his mail? aaugh!


this looks bad. i have serensoft.com running in my basement on a
woody (and freshly-upgraded 2.4.20-k6 kernel) and i allow pop3
and smtp connections for my serensoft mail users.

passwords are in-the-clear there, of course; but with restricted
shells (/bin/false) there's not much danger, is there?

still, if you look at the attached bounce, it looks like somehow
a spammer is trying to use my exim (or worse, IS using my exim)
to relay/forward his junk.

i did `zgrep zimmerman /var/log/exim/mainlog*` and came up
empty. and since it says it arrived on '26 Jan 2003 23:51:44'
i also looked for ':51:44' (thinking maybe the time zone might
affect the log entry, i looked for minutes:seconds) and found
nothing. same for '211.144.100.21', the incoming ip address.

paniclog and rejectlog are empty...

where should i look? what should i look for?

-- 
I use Debian/GNU Linux version 3.0;
Linux server 2.4.20-k6 #1 Mon Jan 13 23:49:14 EST 2003 i586 unknown
 
DEBIAN NEWBIE TIP #104 from Sean Quinlan <[EMAIL PROTECTED]>
:
Looking to CUSTOMIZE THE COLORS USED BY LS?  I find its easier
to run "dircolors -p >~/.dircolors" and then add "eval
`dircolors -b ~/.dircolors`" to my .bashrc and then make all
changes to ~/.dircolors (instead of the system-wide
/etc/DIR_COLORS).  Probably more pertinent on a multi user
system, but good policy nevertheless.

Also see http://newbieDoc.sourceForge.net/ ...

--- Begin Message ---
The original message was received at Sun, 26 Jan 2003 23:51:44 -0500 (EST)
from [211.144.100.21]

   ----- The following addresses had permanent fatal errors -----
<[EMAIL PROTECTED]>
    (reason: 550 5.1.1 <william.zimmerman@[138.12.44.45]>... User unknown)
    (expanded from: <[EMAIL PROTECTED]>)

   ----- Transcript of session follows -----
... while talking to [138.12.44.45]:
>>> RCPT To:<william.zimmerman@[138.12.44.45]>
<<< 550 5.1.1 <william.zimmerman@[138.12.44.45]>... User unknown
550 5.1.1 <[EMAIL PROTECTED]>... User unknown
Reporting-MTA: dns; lexis-nexis.com
Received-From-MTA: DNS; [211.144.100.21]
Arrival-Date: Sun, 26 Jan 2003 23:51:44 -0500 (EST)

Final-Recipient: RFC822; <[EMAIL PROTECTED]>
X-Actual-Recipient: RFC822; william.zimmerman@[138.12.44.45]
Action: failed
Status: 5.1.1
Remote-MTA: DNS; [138.12.44.45]
Diagnostic-Code: SMTP; 550 5.1.1 <william.zimmerman@[138.12.44.45]>... User unknown
Last-Attempt-Date: Sun, 26 Jan 2003 23:51:49 -0500 (EST)
--- Begin Message ---
Title: Englis Classics 3000 英文名著

3000

ENGLISH CLASSICS

英文名著

FounderTop Tech Co., Ltd.

　

精装本

RMB 98.00

收藏、送礼、英语学习之佳品

产品特色

所选3000部(卷)名著均为全本原著(英文版)，攫取世界数千年人类文明精华，名家荟萃、视野开阔、意趣高雅、常读常新。内容涵盖文学、哲学、历史学、经济学、社会学、政治学、法学、心理学、博物学等；并包括大量的诗作、民谣、童话、随笔、游记、传记、回忆录等。

全部采用TXT/HTML格式制作，兼容所有工具软件(如：字典、汉化、翻译、朗读、文字处理等)；无需安装、运行简便。

于TTS软件(北京大学出版社出版的《金山词霸2000》及以上版本已装备)配套使用可实现所有著作的分句、分段或全文朗读。



北京大学出版社出版 ISBN 7-900636-43-9

　

运行环境


任何语言Windows 9x/me/xp/NT/2000或其他相当的操作平台，16MB内存，50MB硬盘，光驱，鼠标。

含CD-ROM金盘二张、《目录及索引手册》一本 RMB 98.00

购买方式

邮购:
批发:

汇款至

请电话或email联系

上海市钦州南路81号出版大楼10层1016室

开户银行：中行漕支古美路分理处

上海方鼎信息技术有限公司郑晓明(收)

帐号：044104-05170410209

邮编：200233

上海方鼎信息技术有限公司

上海市钦州南路81号出版大楼10层, 200233

电话:021-54485000 传真:021-54480276

邮箱:info@foundertop.com   网址:http://www.foundertop.com

　

　　　

上海方鼎信息技术有限公司版权所有

2002.12

--- End Message ---
--- End Message ---

Returned mail... am i relaying? aaugh!

Reply via email to