Solved

Spamming of our domain address

Posted on 2006-11-27
3
369 Views
Last Modified: 2008-02-01
We are receiving lots of NDRs relating to spam emails which are being sent from an email address which has spoofed our domain.  Here is the header from one and an NDR from another:

1)      stephane.tries@danisco.com,stephane.farin@danisco.com,stephane.dessart@danisco.com,stephane.airiaud@danisco.com,
      stephane.accarisio@danisco.com,stenbak@danisco.com,stella.chang@danisco.com
Received: from amy158.internetdsl.tpnet.pl (amy158.internetdsl.tpnet.pl [83.17.80.158])
      by cphgba01.danisco.com (Spam Firewall) with SMTP
      id B7D924B7F8; Mon, 27 Nov 2006 12:23:20 +0100 (CET)
Received: from 212.125.75.19 (HELO mail14.messagelabs.com)
     by danisco.com with esmtp (MI,0H2HGED BTF)),)
     id 3U3F(--TF-2/5-6/
     for stephanie.lamb@danisco.com; Mon, 27 Nov 2006 11:23:41 -0060
Date:      Mon, 27 Nov 2006 11:23:41 -0060
From: "Stefanie Ratliff" <fbiwedlakebellwar@wedlakebell.com>
X-Mailer: The Bat! (v3.5.30) Educational
X-Priority: 3 (Normal)
Message-ID: <537710095.27316152862940@thebat.net>
To: stephanie.lamb@danisco.com
Subject: Pounds down, mood up
MIME-Version: 1.0
Content-Type: text/plain;
  charset=iso-8859-2
Content-Transfer-Encoding: quoted-printable
X-Spam: Not detected

2) Hi. This is the qmail-send program at 3ie.org.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<ie@mhige.org>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <fbiwedlakebellwar@wedlakebell.com>
Received: (qmail 2203 invoked by uid 210); 27 Nov 2006 15:59:15 +0100
Received: from 192.168.201.2 by qmail01 (envelope-from <fbiwedlakebellwar@wedlakebell.com>, uid 201) with qmail-scanner-1.25st
 (clamdscan: 0.88.5/2242. spamassassin: 3.1.3.  
 Clear:RC:0(192.168.201.2):SA:1(6.7/5.0):.
 Processed in 11.588915 secs); 27 Nov 2006 14:59:15 -0000
X-Spam-Status: Yes, hits=6.7 required=5.0
X-Spam-Level: ++++++
X-Spam-Report: SA TESTS
  5.0 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                             [score: 1.0000]
  1.7 AWL                    AWL: From: address is in the auto white-list
Received: from mail-io01.3ie.org (HELO smtp.epita.net) (192.168.201.2)
  by qmail01.3ie.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 27 Nov 2006 15:59:02 +0100
Received: (qmail 5826 invoked from network); 27 Nov 2006 15:59:02 +0100
Received: from unknown (HELO ns4.epita.net) (192.168.3.42)
  by mail-io01.3ie.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 27 Nov 2006 15:59:02 +0100
Received: (qmail 13445 invoked from network); 27 Nov 2006 15:59:00 +0100
Received: from cmt64.neoplus.adsl.tpnet.pl (HELO rts-e5qvbu0cit8) (83.31.147.64)
  by ns4.epita.net with SMTP; 27 Nov 2006 15:59:00 +0100
Return-Path: <fbiwedlakebellwar@wedlakebell.com>
Received: from 212.125.75.19 (HELO mail14.messagelabs.com)
     by mhige.org with esmtp (,-GAF.(25/@2 DW9D27)
     id -474*W-02AS+I-</
     for organie@mhige.org; Mon, 27 Nov 2006 15:00:07 -0060
Date:      Mon, 27 Nov 2006 15:00:07 -0060
From:      "Jean Hart" <fbiwedlakebellwar@wedlakebell.com>
X-Mailer: The Bat! (v3.0.0.15) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <187215447.03757895225538@thebat.net>
To: organie@mhige.org
Subject: Natural way to better weight
MIME-Version: 1.0
Content-Type: text/plain;
  charset=us-ascii
Content-Transfer-Encoding: 8bit
X-Spam: Not detected

How many times did you get unhappy after having a look at the ex tra lbs you gained recently? 0be*sity does not only affect the way you look and feel about yourself. It is also dangerous for your health, bringing plenty of health problems in a variety of spheres. And of course feeling shy to take off your clothes on a beach or in bed with your special one is so saddening.

Is there anything we can do to stop the spanner sending out emails from an address with our domain name *@wedlakebell.com?

0
Comment
Question by:dhymers
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 97

Accepted Solution

by:
war1 earned 250 total points
ID: 18020847
Greetings, dhymers !

There is a couple of things you can do to stop the spammers from spoofing your address. You can follow FTC instructions to avoid spams
http://www.ftc.gov/bcp/conline/pubs/online/inbox.htm

You can report the spam to Spamcop and FTC
Spamcop
http://www.spamcop.net/

FTC
https://rn.ftc.gov/pls/dod/wsolcq$.startup

Best wishes!
0
 
LVL 97

Expert Comment

by:war1
ID: 18054459
dhymers,

We have not heard from you. Did any comment help you solve your problem? Do you have any more question? If an Expert helped you, please accept his/her answer above with an excellent or good grade.

Thanks, war1
0
 

Author Comment

by:dhymers
ID: 18121509
War1, I did as you advised and logged the spam emails on the spam cop website and they appear to have stopped (for now at least).  Thanks for your help.  David.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
Changing a few Outlook Options can help keep you organized!
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question