Solved

Spamming of our domain address

Posted on 2006-11-27
3
366 Views
Last Modified: 2008-02-01
We are receiving lots of NDRs relating to spam emails which are being sent from an email address which has spoofed our domain.  Here is the header from one and an NDR from another:

1)      stephane.tries@danisco.com,stephane.farin@danisco.com,stephane.dessart@danisco.com,stephane.airiaud@danisco.com,
      stephane.accarisio@danisco.com,stenbak@danisco.com,stella.chang@danisco.com
Received: from amy158.internetdsl.tpnet.pl (amy158.internetdsl.tpnet.pl [83.17.80.158])
      by cphgba01.danisco.com (Spam Firewall) with SMTP
      id B7D924B7F8; Mon, 27 Nov 2006 12:23:20 +0100 (CET)
Received: from 212.125.75.19 (HELO mail14.messagelabs.com)
     by danisco.com with esmtp (MI,0H2HGED BTF)),)
     id 3U3F(--TF-2/5-6/
     for stephanie.lamb@danisco.com; Mon, 27 Nov 2006 11:23:41 -0060
Date:      Mon, 27 Nov 2006 11:23:41 -0060
From: "Stefanie Ratliff" <fbiwedlakebellwar@wedlakebell.com>
X-Mailer: The Bat! (v3.5.30) Educational
X-Priority: 3 (Normal)
Message-ID: <537710095.27316152862940@thebat.net>
To: stephanie.lamb@danisco.com
Subject: Pounds down, mood up
MIME-Version: 1.0
Content-Type: text/plain;
  charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable
X-Spam: Not detected

2) Hi. This is the qmail-send program at 3ie.org.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<ie@mhige.org>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <fbiwedlakebellwar@wedlakebell.com>
Received: (qmail 2203 invoked by uid 210); 27 Nov 2006 15:59:15 +0100
Received: from 192.168.201.2 by qmail01 (envelope-from <fbiwedlakebellwar@wedlakebell.com>, uid 201) with qmail-scanner-1.25st
 (clamdscan: 0.88.5/2242. spamassassin: 3.1.3.  
 Clear:RC:0(192.168.201.2):SA:1(6.7/5.0):.
 Processed in 11.588915 secs); 27 Nov 2006 14:59:15 -0000
X-Spam-Status: Yes, hits=6.7 required=5.0
X-Spam-Level: ++++++
X-Spam-Report: SA TESTS
  5.0 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                             [score: 1.0000]
  1.7 AWL                    AWL: From: address is in the auto white-list
Received: from mail-io01.3ie.org (HELO smtp.epita.net) (192.168.201.2)
  by qmail01.3ie.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 27 Nov 2006 15:59:02 +0100
Received: (qmail 5826 invoked from network); 27 Nov 2006 15:59:02 +0100
Received: from unknown (HELO ns4.epita.net) (192.168.3.42)
  by mail-io01.3ie.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 27 Nov 2006 15:59:02 +0100
Received: (qmail 13445 invoked from network); 27 Nov 2006 15:59:00 +0100
Received: from cmt64.neoplus.adsl.tpnet.pl (HELO rts-e5qvbu0cit8) (83.31.147.64)
  by ns4.epita.net with SMTP; 27 Nov 2006 15:59:00 +0100
Return-Path: <fbiwedlakebellwar@wedlakebell.com>
Received: from 212.125.75.19 (HELO mail14.messagelabs.com)
     by mhige.org with esmtp (,-GAF.(25/@2 DW9D27)
     id -474*W-02AS+I-</
     for organie@mhige.org; Mon, 27 Nov 2006 15:00:07 -0060
Date:      Mon, 27 Nov 2006 15:00:07 -0060
From:      "Jean Hart" <fbiwedlakebellwar@wedlakebell.com>
X-Mailer: The Bat! (v3.0.0.15) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <187215447.03757895225538@thebat.net>
To: organie@mhige.org
Subject: Natural way to better weight
MIME-Version: 1.0
Content-Type: text/plain;
  charset=us-ascii
Content-Transfer-Encoding: 8bit
X-Spam: Not detected

How many times did you get unhappy after having a look at the ex tra lbs you gained recently? 0be*sity does not only affect the way you look and feel about yourself. It is also dangerous for your health, bringing plenty of health problems in a variety of spheres. And of course feeling shy to take off your clothes on a beach or in bed with your special one is so saddening.

Is there anything we can do to stop the spanner sending out emails from an address with our domain name *@wedlakebell.com?

0
Comment
Question by:dhymers
  • 2
3 Comments
 
LVL 97

Accepted Solution

by:
war1 earned 250 total points
ID: 18020847
Greetings, dhymers !

There is a couple of things you can do to stop the spammers from spoofing your address. You can follow FTC instructions to avoid spams
http://www.ftc.gov/bcp/conline/pubs/online/inbox.htm

You can report the spam to Spamcop and FTC
Spamcop
http://www.spamcop.net/

FTC
https://rn.ftc.gov/pls/dod/wsolcq$.startup

Best wishes!
0
 
LVL 97

Expert Comment

by:war1
ID: 18054459
dhymers,

We have not heard from you. Did any comment help you solve your problem? Do you have any more question? If an Expert helped you, please accept his/her answer above with an excellent or good grade.

Thanks, war1
0
 

Author Comment

by:dhymers
ID: 18121509
War1, I did as you advised and logged the spam emails on the spam cop website and they appear to have stopped (for now at least).  Thanks for your help.  David.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question