[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: blacklisting a forger
From:       "Terry Carmen" <terry () cnysupport ! com>
Date:       2009-08-01 15:04:35
Message-ID: 6ced6af2e678ca88b8afd51beb617672.squirrel () webmail ! cnysupport ! com
[Download RAW message or body]


> On Sat, 1 Aug 2009 10:02:54 -0400
> "Terry Carmen" <terry@cnysupport.com> wrote:
>
>>
>> > I have received  many emails in the last hour which were
>> > undeliverable, NOT sent by me.
>> > It seems someone is forging usernames in my domain
>> > Real-World-Systems.com as the "from:" and the "return-path:" .
>> >
>> > Received-From-MTA: dns;triband-mum-59.184.51.13.mtnl.net.in
>> >
>> >
>> > I have sent a message to abuse@mntl.net.in and helpdesk@mtnl.net.in
>> > but no response.
>> >
>> > How does an MTA get blacklisted??
>>
>> You'll probably never get a response, and even if you do, nothing
>> will happen.
>>
>> The easiest thing to do is configure your mail server use an RBL,
>> which would have stopped this before you received it.
>
> No it wouldn't. triband-mum-59.184.51.13.mtnl.net.in is almost
> certainly an infected PC, and the backscatter is coming from
> third-party servers.


The IP address is listed on almost two dozen RBLs.

Terry'

[prev in list] [next in list] [prev in thread] [next in thread]