On 6/2/2010 8:50 AM, Robert Fitzpatrick wrote:
> I am getting a lot of these for various domains...
> 
> Jun  2 07:21:08 esmtp postfix/smtpd[55535]: NOQUEUE: reject: RCPT from
> mail.cypresspartners.com[72.242.211.227]: 450 4.1.8
> <onlinebanking.ela...@onlinealert.bankofamerica.com>: Sender address
> rejected: Domain not found;
> from=<onlinebanking.ela...@onlinealert.bankofamerica.com>
> to=<de...@plasticert.com> proto=ESMTP helo=<mail.cypresspartners.com>
> 
> I assume these are legitimate rejects since the helo domain is
> cypresspartners.com and I did not find an A record for that domain. Is
> that correct?
> 
> Just want to confirm since I have a user not receiving an auto-email
> from BOA. But not this user above.
> 
> Thanks, Robert


Considering that 'mail.cypresspartners.com' isn't showing as an
authorized MX for bankofamerica.com, I'm assuming this is a spam attempt
that has failed.


It appears that mail.cypresspartners.com is a postfix server which
appears, to me at least, to be sending out spam.

-Matt

Reply via email to