Solved

spam being sent from my email address domain

Posted on 2014-07-22
4
689 Views
Last Modified: 2014-08-05
Hi,

the following email was sent from the email account today :


Could not deliver message to the following recipient(s):

Failed Recipient: travelbysuzanne@aol.com
Reason: Remote host said: 421 4.2.1 : (DYN:T1) http://postmaster.info.aol.com/errors/421dynt1.html

-- The header and top 20 lines of the message follows --

Received: from runningprofiles.com (pool-62-172-16-186.telecel.com.py [186.16.172.62]) by HV18ACCU1351.runningprofiles.com with SMTP;
Mon, 21 Jul 2014 14:37:42 +0100
Subject: From: Lawrence Weitzner
From: "Lawrence Weitzner"
Content-Type: multipart/alternative;
boundary=Apple-Mail-920D2322-FF78-4683-A0E4-B4A40A40EBD1
X-Mailer: iPhone Mail (9B206)
Message-Id: <5B8A95E3-A68A-461E-8BB7-719BAE4E86AF@runningprofiles.com>
Date: Mon, 21 Jul 2014 15:37:39 +0200
To: "travelbysuzanne@aol.com"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)


--Apple-Mail-920D2322-FF78-4683-A0E4-B4A40A40EBD1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii




Sup


http://naijaleaks.org/wp-content/uploads/wysija/themes/UoTZVswsXM/build.php=
?wdrcpeyspg2744ucadk


Lawrence Weitzner


--Apple-Mail-920D2322-FF78-4683-A0E4-B4A40A40EBD1

How can i stop this happening as its sent around 100 emails with alot bouncing back into my inbox.
0
Comment
Question by:runnerjp2005
  • 2
4 Comments
 
LVL 16

Accepted Solution

by:
Dirk Mare earned 400 total points
ID: 40211177
1st, Check if your domain is not blacklisted..
http://mxtoolbox.com/

2nd, Run the MXtoolbox test to test your mail server to see if it is an open relay..
http://mxtoolbox.com/diagnostic.aspx

If you are blacklisted it means your server is either a open relay which you can test with the second link fix this before attempting to remove the blacklists. If you are not an open relay you probably have a virus or trojan that is sending spam emails.. scan all your workstations for viruses or locate the infected PC using network sniffing tools such as Wireshark..

DirkMare
0
 

Author Comment

by:runnerjp2005
ID: 40211229
Hi Dirk - thanks for the great information.

I seem to be blacklisted on these two areas:


Blacklist      Reason      TTL      ResponseTime      
 LISTED      BARRACUDA      173.248.136.249 was listed  Detail      865      312      Ignore
 LISTED      ivmSIP      173.248.136.249 was listed  Detail      2100      125      Ignore

and this on second link


Test      Result      
      SMTP Banner Check      Reverse DNS FAILED! This is a problem.       More Info
      SMTP TLS      Warning - Does not support TLS.       More Info
      SMTP Transaction Time      16.957 seconds - Not good! on Transaction Time       More Info
      SMTP Connection Time      0.702 seconds - Good on Connection time      
      SMTP Open Relay      OK - Not an open relay.

not sure what blacklisting is or what to do?
0
 
LVL 16

Expert Comment

by:Dirk Mare
ID: 40211246
Blacklisting means your exchange server is being blacklisted on the internet because some or all of your PC are sending SPAM from your network.

You need to find the infected PC and remove the trojan or virus from that machine. Make sure all your computers and servers have up to date with antivirus and malware protection ensure the firewall is properly configured and working.

You can download bitdefender rescue disc or Kaspersky rescue disc download the ISO file and burn to CD, boot your computer from the CD, update the definitions and scan your PC.

Make sure you remove the virus from the infected machine before you request the removal of your domain blacklist.

An excellent explanation can be found here.
http://www.inmotionhosting.com/support/email/email-troubleshooting/why-do-mail-servers-get-blacklisted

DirkMare
0
 
LVL 6

Assisted Solution

by:S_K_S
S_K_S earned 100 total points
ID: 40217016
Another additional step in case we are able to identify a virus infected machine. Have the user using that machine change his\her password.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange 2013 -Load Balancing 5 55
Way to Disable Outlook Follow Up Flags 3 45
Exhange 2010 10 37
Zimbra server - multiple domain reponse HELO 3 9
Resolve DNS query failed errors for Exchange
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This Micro Tutorial will demonstrate the easy use of Gmail embedding images in your email so the recipient of your email can view them in context.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question