Spam with our domain

[Gunnar Wrobel]

Paul Douglas Franklin of Yakima UGM <pdf at yugm.org> writes:

> Here is the relay path:
> Return-Path: <webmaster at promote-biz.net>
> Received: from localhost (localhost [127.0.0.1])
>      by exchange.yugm.org (Cyrus v2.2.12) with LMTPA;
>      Tue, 05 Feb 2008 02:40:09 -0800
> X-Sieve: CMU Sieve 2.2
> Received: from localhost (localhost [127.0.0.1])
>     by exchange.yugm.org (Postfix) with ESMTP id 733B94579B9
>     for <storage at yugm.org>; Tue,  5 Feb 2008 02:40:09 -0800 (PST)
> X-Envelope-From: <webmaster at promote-biz.net>
> X-Envelope-To: <roys at yugm.org>
> X-Quarantine-Id: <TrJnzLpOOcYM>
> Received: from localhost (localhost [127.0.0.1])
>     by exchange.yugm.org (Postfix) with ESMTP id 0ADCB4579BD
>     for <roys at yugm.org>; Tue,  5 Feb 2008 02:40:09 -0800 (PST)
> Received: from promote-biz.net (unknown [58.244.217.40])
>     by exchange.yugm.org (Postfix) with ESMTP id 255514579BA
>     for <lcv at yugm.org>; Tue,  5 Feb 2008 02:40:07 -0800 (PST)
> Reply-To: webmaster at promote-biz.net
> From: Income at yugm.org, Machine at yugm.org
>
> Wow!  you were very busy today, Gunnar.  Thanks for all your answers to 
> questions.
> --Paul
>
> Gunnar Wrobel wrote:
>> Paul Douglas Franklin of Yakima UGM <pdf at yugm.org> writes:
>>
>>   
>>> We have been receiving spam from randomusernames at yugm.org.  These are 
>>> names which do not match any real users.  This spam did not originate on 
>>> our server; it has been relayed at least once.  Can anyone point me to 
>>> some method of screening it out?
>>>     
>>
>> Hm, actually the Kolab postfix configuration should not accept emails
>> from the outside with a faked username that doesn't exist in the
>> database. Can you be more specific on the relay path?

My comment was incorrect. Since the mail is addressed to a user that
exists on your system, postfix will happily accept it.

We are currently checking if we will mark such mails with "Untrusted"
in the From-header. But right now there is probably not that much you
can do to filter them.

Cheers,

Gunnar

>>
>> Cheers,
>>
>> Gunnar
>>   
>
> -- 
> Paul Douglas Franklin
> Computer Manager, Union Gospel Mission of Yakima, Washington
> Husband of Danette
> Father of Laurene, Miriam, Tycko, Timothy, Sarabeth, Marie, Dawnita, Anna Leah, Alexander, and Caleb
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users

-- 
______ http://kdab.com _______________ http://kolab-konsortium.com _

p at rdus Kolab work is funded in part by KDAB and the Kolab Konsortium

____ http://www.pardus.de _________________ http://gunnarwrobel.de _
E-mail : p at rdus.de                                 Dr. Gunnar Wrobel
Tel.   : +49 700 6245 0000                          Bundesstrasse 29
Fax    : +49 721 1513 52322                          D-20146 Hamburg
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   >> Mail at ease - Rent a kolab groupware server at p at rdus <<                 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~