all groups > iis smtp nntp > november 2006 >
You're in the

iis smtp nntp

group:

Possible Virus or smtp compromised Help Required



Possible Virus or smtp compromised Help Required Simon Gare
11/6/2006 12:00:00 AM
iis smtp nntp: Hi,

below is a System Administrator 'Undeliverable' message which is strange
because I didn't send it ?? I seem to get a few of these as well as some of
my own being rejected from gmail and other domains as our domain is
associated with unsolicited mail???? I just wonder if and how our server is
being compromised, maybe it could be a virus.

Your message did not reach some or all of the intended recipients.

Subject: Are you sure your website is listed in search engines?

Sent: 06/11/2006 09:03

The following recipient(s) could not be reached:

a.latrech@gnet.tn on 06/11/2006 09:31

The e-mail account does not exist at the organization this message was sent
to. Check the e-mail address, or contact the recipient directly to find out
the correct address.

< gnetmail1.outgw.tn #5.1.1 SMTP; 550 <a.latrech@gnet.tn>: Recipient address
rejected: User unknown in relay recipient table>

Any help is appreciated.

Regards
Simon Gare
The Gare Group Limited

website: www.thegaregroup.co.uk
website: www.privatehiresolutions.co.uk

Re: Possible Virus or smtp compromised Help Required PeterD
11/6/2006 9:24:56 AM
On Mon, 6 Nov 2006 09:38:19 -0000, "Simon Gare" <sg@simongare.com>
[quoted text, click to view]

Re: Possible Virus or smtp compromised Help Required PeterD
11/6/2006 12:39:07 PM
On Mon, 6 Nov 2006 16:05:44 -0000, "Simon Gare" <sg@simongare.com>
[quoted text, click to view]

They take your address and put it in the from header... Trivial, and
very common. Reasons:

1. To annoy the hell out of real people, and
2. Some SMTP systems will check the validity of the return address

I've had entire domains that had to be shut down because of Korean
drug spam'ers... But before shutting it down, I forwarded about
23,000 spam error return messages to the spammer's ISP. It didn't help
them one bit that it was clear that the ISP *was* the spammer in this
case.
Re: Possible Virus or smtp compromised Help Required Simon Gare
11/6/2006 4:05:44 PM
Hi Peter,

how does that happen?

Simon

[quoted text, click to view]

AddThis Social Bookmark Button