> On Sat, 1 Aug 2009 11:04:35 -0400 > "Terry Carmen" <te...@cnysupport.com> wrote: > >> >> > On Sat, 1 Aug 2009 10:02:54 -0400 >> > "Terry Carmen" <te...@cnysupport.com> wrote: >> > >> >> >> >> > I have received many emails in the last hour which were >> >> > undeliverable, NOT sent by me. >> >> > It seems someone is forging usernames in my domain >> >> > Real-World-Systems.com as the "from:" and the "return-path:" . >> >> > >> >> > Received-From-MTA: dns;triband-mum-59.184.51.13.mtnl.net.in >> >> > >> >> > >> >> > I have sent a message to ab...@mntl.net.in and >> >> > helpd...@mtnl.net.in but no response. >> >> > >> >> > How does an MTA get blacklisted?? >> >> >> >> You'll probably never get a response, and even if you do, nothing >> >> will happen. >> >> >> >> The easiest thing to do is configure your mail server use an RBL, >> >> which would have stopped this before you received it. >> > >> > No it wouldn't. triband-mum-59.184.51.13.mtnl.net.in is almost >> > certainly an infected PC, and the backscatter is coming from >> > third-party servers. >> >> >> The IP address is listed on almost two dozen RBLs. > > sure, but the original poster wrote: > > "I have received many emails in the last hour which were > undeliverable, NOT sent by me. It seems someone is forging usernames in > my domain"
The backscatter would not have been received, since the sender is on a number of RBLs. Terry > > In other words he is receiving backscatter. And Received-From-MTA > is a standard DSN field set by the MTA generating the DSN. > -- CNY Support, LLC Web. Database. Business http://www.cnysupport.com
