[ctw] Re: Forged Helo's Blocked - Now invalid local sender
- From: Tom Shaw <tshaw@xxxxxxxx>
- To: ctw@xxxxxxxxxxxxx
- Date: Wed, 27 May 2009 12:44:58 -0400
OK hang loose. I gotta get back to my laptop.
At 12:38 PM -0400 5/27/09, Robert Wolff wrote:
I have the same thing even before the update, even my gmail account
that I use just for testing.
Everything is a ForgedHELO and a SpoofedSender.
-------------------------------------
May-26-09 23:11:06 Connected: 74.125.44.30:49009 ->
75.127.202.229:25 -> 127.0.0.1:125
May-26-09 23:11:06 [ForgedHELO] 74.125.44.30 <xxxxxx@xxxxxxxxx>
[monitoring] (forged Helo: 'yx-out-2324.google.com')
May-26-09 23:11:06 LDAP Results (email=xxxxxx@xxxxxxxxx): 0 :
May-26-09 23:11:06 [ForgedLocalSender] 74.125.44.30
<xxxxxx@xxxxxxxxx> [monitoring] (Invalid Local Sender
'xxxxxx@xxxxxxxxx')
May-26-09 23:11:06 [SpoofedSender] 74.125.44.30 <xxxxxx@xxxxxxxxx>
to: rob@xxxxxxxxxxxxx [monitoring] (No Spoofing Allowed
'xxxxxx@xxxxxxxxx')
May-26-09 23:11:06 74.125.44.30 <xxxxxx@xxxxxxxxx> to:
rob@xxxxxxxxxxxxx MessageScore is now -6, after adding -6 (74.125.44
in griplist (0.20))
May-26-09 23:11:28 74.125.44.30 <xxxxxx@xxxxxxxxx> to:
rob@xxxxxxxxxxxxx Regex:SPFstrict '@gmail.com'
May-26-09 23:11:29 [URIBL] 74.125.44.30 <xxxxxx@xxxxxxxxx> to:
rob@xxxxxxxxxxxxx [scoring(-6)] (URIBL: fail, gmail.com listed in
uribl.swinog.ch<-208.67.217.132;
May-26-09 23:11:29 74.125.44.30 <xxxxxx@xxxxxxxxx> to:
rob@xxxxxxxxxxxxx MessageScore is now 19, after adding 25 (URIBL:
fail, gmail.com listed in uribl.swinog.ch<-208.67.217.132; )
May-26-09 23:11:30 74.125.44.30 <xxxxxx@xxxxxxxxx> to:
rob@xxxxxxxxxxxxx [scoring(25)] Bayesian Check - Prob: 0.99553 =>
spam
May-26-09 23:11:30 74.125.44.30 <xxxxxx@xxxxxxxxx> to:
rob@xxxxxxxxxxxxx MessageScore is now 64, after adding 45 (Bayesian
Probability: 0.9955)
May-26-09 23:11:30 [MessageScore] 74.125.44.30 <xxxxxx@xxxxxxxxx>
to: rob@xxxxxxxxxxxxx [spam found] (MessageScore 64, limit 50) ->
/applications/assp/spam/11875.eml;
May-26-09 23:11:30 Disconnected: 74.125.44.30
-------------------------------------
-
--
Robert Wolff, Online Ontime Ltd.
1070 Middle Country Road, Suite 7, PMB 118 - Selden, NY 11784
631-256-8472 - www.onlineontime.net
Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subjectsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq
--
Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weather
US Phone Numbers: 321-984-3714, 321-729-6258(fax),
321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw@xxxxxxx
Fish more and Live longer
Circle The Wagons
manage: //www.freelists.org/list/ctw
post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq
Other related posts:
