Solved

Spamming of our domain address

Posted on 2006-11-27
3
358 Views
Last Modified: 2008-02-01
We are receiving lots of NDRs relating to spam emails which are being sent from an email address which has spoofed our domain.  Here is the header from one and an NDR from another:

1)      stephane.tries@danisco.com,stephane.farin@danisco.com,stephane.dessart@danisco.com,stephane.airiaud@danisco.com,
      stephane.accarisio@danisco.com,stenbak@danisco.com,stella.chang@danisco.com
Received: from amy158.internetdsl.tpnet.pl (amy158.internetdsl.tpnet.pl [83.17.80.158])
      by cphgba01.danisco.com (Spam Firewall) with SMTP
      id B7D924B7F8; Mon, 27 Nov 2006 12:23:20 +0100 (CET)
Received: from 212.125.75.19 (HELO mail14.messagelabs.com)
     by danisco.com with esmtp (MI,0H2HGED BTF)),)
     id 3U3F(--TF-2/5-6/
     for stephanie.lamb@danisco.com; Mon, 27 Nov 2006 11:23:41 -0060
Date:      Mon, 27 Nov 2006 11:23:41 -0060
From: "Stefanie Ratliff" <fbiwedlakebellwar@wedlakebell.com>
X-Mailer: The Bat! (v3.5.30) Educational
X-Priority: 3 (Normal)
Message-ID: <537710095.27316152862940@thebat.net>
To: stephanie.lamb@danisco.com
Subject: Pounds down, mood up
MIME-Version: 1.0
Content-Type: text/plain;
  charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable
X-Spam: Not detected

2) Hi. This is the qmail-send program at 3ie.org.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<ie@mhige.org>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <fbiwedlakebellwar@wedlakebell.com>
Received: (qmail 2203 invoked by uid 210); 27 Nov 2006 15:59:15 +0100
Received: from 192.168.201.2 by qmail01 (envelope-from <fbiwedlakebellwar@wedlakebell.com>, uid 201) with qmail-scanner-1.25st
 (clamdscan: 0.88.5/2242. spamassassin: 3.1.3.  
 Clear:RC:0(192.168.201.2):SA:1(6.7/5.0):.
 Processed in 11.588915 secs); 27 Nov 2006 14:59:15 -0000
X-Spam-Status: Yes, hits=6.7 required=5.0
X-Spam-Level: ++++++
X-Spam-Report: SA TESTS
  5.0 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                             [score: 1.0000]
  1.7 AWL                    AWL: From: address is in the auto white-list
Received: from mail-io01.3ie.org (HELO smtp.epita.net) (192.168.201.2)
  by qmail01.3ie.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 27 Nov 2006 15:59:02 +0100
Received: (qmail 5826 invoked from network); 27 Nov 2006 15:59:02 +0100
Received: from unknown (HELO ns4.epita.net) (192.168.3.42)
  by mail-io01.3ie.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 27 Nov 2006 15:59:02 +0100
Received: (qmail 13445 invoked from network); 27 Nov 2006 15:59:00 +0100
Received: from cmt64.neoplus.adsl.tpnet.pl (HELO rts-e5qvbu0cit8) (83.31.147.64)
  by ns4.epita.net with SMTP; 27 Nov 2006 15:59:00 +0100
Return-Path: <fbiwedlakebellwar@wedlakebell.com>
Received: from 212.125.75.19 (HELO mail14.messagelabs.com)
     by mhige.org with esmtp (,-GAF.(25/@2 DW9D27)
     id -474*W-02AS+I-</
     for organie@mhige.org; Mon, 27 Nov 2006 15:00:07 -0060
Date:      Mon, 27 Nov 2006 15:00:07 -0060
From:      "Jean Hart" <fbiwedlakebellwar@wedlakebell.com>
X-Mailer: The Bat! (v3.0.0.15) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <187215447.03757895225538@thebat.net>
To: organie@mhige.org
Subject: Natural way to better weight
MIME-Version: 1.0
Content-Type: text/plain;
  charset=us-ascii
Content-Transfer-Encoding: 8bit
X-Spam: Not detected

How many times did you get unhappy after having a look at the ex tra lbs you gained recently? 0be*sity does not only affect the way you look and feel about yourself. It is also dangerous for your health, bringing plenty of health problems in a variety of spheres. And of course feeling shy to take off your clothes on a beach or in bed with your special one is so saddening.

Is there anything we can do to stop the spanner sending out emails from an address with our domain name *@wedlakebell.com?

0
Comment
Question by:dhymers
  • 2
3 Comments
 
LVL 97

Accepted Solution

by:
war1 earned 250 total points
ID: 18020847
Greetings, dhymers !

There is a couple of things you can do to stop the spammers from spoofing your address. You can follow FTC instructions to avoid spams
http://www.ftc.gov/bcp/conline/pubs/online/inbox.htm

You can report the spam to Spamcop and FTC
Spamcop
http://www.spamcop.net/

FTC
https://rn.ftc.gov/pls/dod/wsolcq$.startup

Best wishes!
0
 
LVL 97

Expert Comment

by:war1
ID: 18054459
dhymers,

We have not heard from you. Did any comment help you solve your problem? Do you have any more question? If an Expert helped you, please accept his/her answer above with an excellent or good grade.

Thanks, war1
0
 

Author Comment

by:dhymers
ID: 18121509
War1, I did as you advised and logged the spam emails on the spam cop website and they appear to have stopped (for now at least).  Thanks for your help.  David.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Get an idea of what you should include in an email disclaimer with these Top 5 email disclaimer tips.
Outlook Free & Paid Tools
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now