Anatomy of this simple spam.

2010-03-03 Thread Joshua Kordani
ith a from field so deformed, my mail server spits back "I can break things too" and quits my connection. How can I manually recreate this spoof so that I can learn how to filter it out? Thanks for your pointers! Joshua Kordani jkord...@intlogsys.com X-Account-Key: account2 X-Mozilla-

Re: postfix as "dispatcher"

2010-03-03 Thread Joshua Kordani
On 3/3/2010 8:51 AM, aa wrote: Hi all, I don't know if dispatcher is the exact word to express this concept but I need that a postfix server doen't send the mail directly but it can pass this mail to send to one of a series of postfix series that are the actual senders of the mail..this server ar

Re: Anatomy of this simple spam.

2010-03-03 Thread Joshua Kordani
On 3/3/2010 11:12 AM, Ansgar Wiechers wrote: On 2010-03-03 Joshua Kordani wrote: Hello all! I have recently come across a few spams that I am trying to block. The anatomy of the message probably isn't new to most of you, but when I try to recreate the spoofed sections that I wish to f

Re: Anatomy of this simple spam.

2010-03-03 Thread Joshua Kordani
On 3/3/2010 2:19 PM, post...@piven.net wrote: $ telnet mail.mydomain.com smtp (rcv) 200 your mail server's banner (snd) HELO whatever (rcv) 250 your-server's-hostname (snd) MAIL FROM: whatever (rcv) 250 2.1.0 Ok (snd) RCPT TO: your-testing-mailbox (rcv) 250 2.1.5 Ok (snd) DATA (rcv) 354 End data

Re: Anatomy of this simple spam.

2010-03-04 Thread Joshua Kordani
On 3/3/2010 4:11 PM, Noel Jones wrote: You can't enforce the From: header. The From: header in your spam probably looked something like From: Word Word which is invalid, so postfix rewrote to From: w...@example.com w...@example.com Postfix rewriting controls are described here: http://www.postf

Re: Anatomy of this simple spam.

2010-03-04 Thread Joshua Kordani
Thanks everyone for illuminating the true problem for me! Josh