Mailinglist Archive: opensuse-security (685 mails)

< Previous Next >
Spamming ...
  • From: Martin Schichl <mschichl@xxxxxxxxx>
  • Date: Fri, 01 Mar 2002 07:06:17 +0100
  • Message-id: <3.0.5.32.20020301070617.008484e0@xxxxxxxxx>
Morning!

Since some days I get Returned Mails from unknown mail-users which seems
that someone is spamming from our machine.

But when i analyze the header of the original mail i fin a line:
>> Received: from 210.97.42.1 (HELO scc.co.at) (210.97.42.1) <<
Although the IP of scc.co.at is 193.81.182.39

The IP 210.97.42.1 will change permanently when reading other
similar mails.

My questions:
1) Is it possible that someone beoke into our machine and sent this
mail directly over scc.co.at
2) What can I do to stop those spammers ...

ThanX

Martin



The header file of the original Message
---------------------------------------------------------------
X-Track: 92154: 2
X-Rocket-Spam: 210.97.42.1
X-YahooFilteredBulk: 210.97.42.1
Return-Path: <rjnr3245i37@xxxxxxxxx>
Received: from 210.97.42.1 (HELO scc.co.at) (210.97.42.1)
by mta514.mail.yahoo.com with SMTP; 28 Feb 2002 15:32:36 -0800 (PST)
Reply-To: <rjnr3245i37@xxxxxxxxx>
Message-ID: <001a07e37abc$2777d8d5$6ce83be4@lplwmr>
From: <rjnr3245i37@xxxxxxxxx>
To: <doctorbutcher@xxxxxxxxx>
---------------------------------------------------------------




-----------------------------------------------------------------
Dipl.-Ing. Martin Schichl
SC&C Software, Communication & Consulting GmbH & Co KEG
Grottenhofstr. 3, A-8053 Graz
Tel. +43/(0)316/265-205, Fax +43/(0)316/265-234
mschichl@xxxxxxxxx, http://scc.co.at


< Previous Next >