[ctw] Re: Forged Helo's Blocked - Now invalid local sender

  • From: Robert Wolff <rob@xxxxxxxxxxxxxxxx>
  • To: ctw@xxxxxxxxxxxxx
  • Date: Wed, 27 May 2009 12:38:18 -0400

I have the same thing even before the update, even my gmail account that I use 
just for testing.

Everything is a ForgedHELO and a SpoofedSender.

-------------------------------------
May-26-09 23:11:06 Connected: 74.125.44.30:49009 -> 75.127.202.229:25 -> 
127.0.0.1:125
May-26-09 23:11:06 [ForgedHELO] 74.125.44.30 <xxxxxx@xxxxxxxxx> [monitoring] 
(forged Helo: 'yx-out-2324.google.com')
May-26-09 23:11:06 LDAP Results (email=xxxxxx@xxxxxxxxx): 0 : 
May-26-09 23:11:06 [ForgedLocalSender] 74.125.44.30 <xxxxxx@xxxxxxxxx> 
[monitoring] (Invalid Local Sender 'xxxxxx@xxxxxxxxx')
May-26-09 23:11:06 [SpoofedSender] 74.125.44.30 <xxxxxx@xxxxxxxxx> to: 
rob@xxxxxxxxxxxxx [monitoring] (No Spoofing Allowed 'xxxxxx@xxxxxxxxx')
May-26-09 23:11:06 74.125.44.30 <xxxxxx@xxxxxxxxx> to: rob@xxxxxxxxxxxxx 
MessageScore is now -6, after adding -6 (74.125.44 in griplist (0.20))
May-26-09 23:11:28 74.125.44.30 <xxxxxx@xxxxxxxxx> to: rob@xxxxxxxxxxxxx 
Regex:SPFstrict '@gmail.com'
May-26-09 23:11:29 [URIBL] 74.125.44.30 <xxxxxx@xxxxxxxxx> to: 
rob@xxxxxxxxxxxxx [scoring(-6)] (URIBL: fail, gmail.com listed in 
uribl.swinog.ch<-208.67.217.132; 
May-26-09 23:11:29 74.125.44.30 <xxxxxx@xxxxxxxxx> to: rob@xxxxxxxxxxxxx 
MessageScore is now 19, after adding 25 (URIBL: fail, gmail.com listed in 
uribl.swinog.ch<-208.67.217.132; )
May-26-09 23:11:30 74.125.44.30 <xxxxxx@xxxxxxxxx> to: rob@xxxxxxxxxxxxx 
[scoring(25)] Bayesian Check - Prob: 0.99553 => spam
May-26-09 23:11:30 74.125.44.30 <xxxxxx@xxxxxxxxx> to: rob@xxxxxxxxxxxxx 
MessageScore is now 64, after adding 45 (Bayesian Probability: 0.9955)
May-26-09 23:11:30 [MessageScore] 74.125.44.30 <xxxxxx@xxxxxxxxx> to: 
rob@xxxxxxxxxxxxx [spam found] (MessageScore 64, limit 50) -> 
/applications/assp/spam/11875.eml;
May-26-09 23:11:30 Disconnected: 74.125.44.30
-------------------------------------

-


--
Robert Wolff, Online Ontime Ltd.
1070 Middle Country Road, Suite 7, PMB 118 - Selden, NY 11784
631-256-8472 - www.onlineontime.net
Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Other related posts: