----- Original Message ----
> From: Dimitrios Karapiperis <dim...@thessaloniki.gr>
> To: postfix-users@postfix.org
> Sent: Mon, February 1, 2010 7:57:36 AM
> Subject: trusted Ip address spoofed?
>
> Hi there
>
> I have a Postfix installation (postfix-2.6.5-1.rhel5) and I relay a couple
> of
> remote ip addresses
> (static adsl) of remote sites.
>
> I cannot figure out how a spam originator fired some e-mails through my mail
> server
> using a specific remote IP, which was relayed
>
> Return-Path:
> Received: from hhyllw (smtp.domain.tld[111.222.333.444])
> by smtp.thessaloniki.gr (Postfix) with ESMTP id 8DB72180C1
> for ; Mon, 1 Feb 2010 08:49:00 +0200 (EET)
> Received: from beoeb ([xxx.yyy.zzz.ccc])
> by EADYCSRY (8.13.4/8.13.4) with SMTP id u4231584378453i6Ib016100
> for ; Mon, 01 Feb 2010 08:48:56 +0200 (CDT)
>
> The 111.222.333.444 is the relayed trusted ip and xxx.yyy.zzz.ccc is the
> malicious one.
>
>
> How can I prevent such things?????
>
>
> Thanks in advane
> Dimitrios
Dimitrios,
Can you not hide the IP addresses, they are needed to help you out.
Thanks,
Daniel Reinhardt
Website: www.cryptodan.com
Email: crypto...@yahoo.com
