niXforums Forum Index
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   PreferencesPreferences   Log in to check your private messagesLog in to check your private messages   Log inLog in 
·  nixdoc.net ·  man pages ·  Linux HOWTOs ·  FreeBSD Tips ·  Forums
navigation Forum index » *nix » Linux » Distributions » Suse
Being swamped byspoofed emails
Post new topic   Reply to topic Page 1 of 1 [5 Posts] View previous topic :: View next topic
Author Message
Clive
*nix forums beginner


Joined: 17 May 2005
Posts: 37

PostPosted: Fri Jul 21, 2006 10:08 am    Post subject: Being swamped byspoofed emails Reply with quote

Hi all,

Slightly OT, but I guess many others of you may have similar problems.
I recently get a domain name and set up my Suse 10.1 box to become a mail
server. Everything was fine for a week until last night I returned to find I
had a 1000 new emails, mostly bounce messages from a 'spoofed' email which
had been sent out using my domain name.

Most of the emails had been sent from 'mail@mydomain...' so I removed
the 'mail' alias so as to stop my inbox from overloading and so my server
would bounce back these messages.

Is this a common thing to happen ? I have not advertised or used my
domain anywhere, but somehow it has been picked up.

Is there anything I can do to avoid being spoofed like this ?

//Clive.
Back to top
Lawrence D'Oliveiro
*nix forums Guru


Joined: 25 Mar 2005
Posts: 723

PostPosted: Fri Jul 21, 2006 10:52 am    Post subject: Re: Being swamped byspoofed emails Reply with quote

In message <e9q93f$n4b$1@news.al.sw.ericsson.se>, Clive wrote:

Quote:
I recently get a domain name and set up my Suse 10.1 box to become a mail
server. Everything was fine for a week until last night I returned to find
I had a 1000 new emails, mostly bounce messages from a 'spoofed' email
which had been sent out using my domain name.

That's called a "Joe Job". Welcome to the club. :)

Quote:
Is this a common thing to happen ? I have not advertised or used my
domain anywhere, but somehow it has been picked up.

I suppose the spammers must scan the domain name registries, looking for
names to use.

Quote:
Is there anything I can do to avoid being spoofed like this ?

If only...
Back to top
houghi
*nix forums Guru


Joined: 22 Feb 2005
Posts: 6233

PostPosted: Fri Jul 21, 2006 11:32 am    Post subject: Re: Being swamped byspoofed emails Reply with quote

Clive wrote:
Quote:
Is this a common thing to happen ?

Yes.

Quote:
I have not advertised or used my
domain anywhere, but somehow it has been picked up.

You registed your domain, so it will known. Could be that the domain was
used before as well.

Quote:
Is there anything I can do to avoid being spoofed like this ?

No. I can put mail@example.com in my from adress and there is nothing
you can do against it. Well, against me, but not if spammers use it.

Yes. You can take action and analyze the bounces to see where they came
from originaly and write those (don't send emails to the bouncers)

Wether that is possible with a script and if scripts for that are
available, I do not know.

--
houghi Please do not toppost http://houghi.org
Let's not be too tough on our own ignorance. It's the thing that makes
America great. If America weren't incomparably ignorant, how could we
have tolerated the last eight years? -- Frank Zappa, in 1988
Back to top
Clive
*nix forums beginner


Joined: 17 May 2005
Posts: 37

PostPosted: Fri Jul 21, 2006 11:47 am    Post subject: Re: Being swamped byspoofed emails Reply with quote

"Lawrence D'Oliveiro" <ldo@geek-central.gen.new_zealand> wrote in message
news:e9qbjv$kkn$2@lust.ihug.co.nz...
Quote:
In message <e9q93f$n4b$1@news.al.sw.ericsson.se>, Clive wrote:

I recently get a domain name and set up my Suse 10.1 box to become a
mail
server. Everything was fine for a week until last night I returned to
find
I had a 1000 new emails, mostly bounce messages from a 'spoofed' email
which had been sent out using my domain name.

That's called a "Joe Job". Welcome to the club. :)

Is this a common thing to happen ? I have not advertised or used my
domain anywhere, but somehow it has been picked up.

I suppose the spammers must scan the domain name registries, looking for
names to use.


Cheers, makes you realise how much spam and useless background traffic there
must be flying around the internet. My only concern was that my domain may
become 'blacklisted' if it is seen as being the originator of this type of
thing (though obviously not having come from my IP address)

//Clive.
Back to top
houghi
*nix forums Guru


Joined: 22 Feb 2005
Posts: 6233

PostPosted: Fri Jul 21, 2006 12:35 pm    Post subject: Re: Being swamped byspoofed emails Reply with quote

Clive wrote:
Quote:
Cheers, makes you realise how much spam and useless background traffic there
must be flying around the internet.

Some say around 80% of emails is spam. As long as it makes them oney,
it will exist.

Quote:
My only concern was that my domain may
become 'blacklisted' if it is seen as being the originator of this type of
thing (though obviously not having come from my IP address)

I wish that that would happen, because then serious mesures would have
been taken against spam a long time ago.

--
houghi Please do not toppost http://houghi.org
Let's not be too tough on our own ignorance. It's the thing that makes
America great. If America weren't incomparably ignorant, how could we
have tolerated the last eight years? -- Frank Zappa, in 1988
Back to top
Google

Back to top
Display posts from previous:   
Post new topic   Reply to topic Page 1 of 1 [5 Posts] View previous topic :: View next topic
The time now is Sat Nov 22, 2008 9:21 pm | All times are GMT
navigation Forum index » *nix » Linux » Distributions » Suse
Jump to:  

Similar Topics
Topic Author Forum Replies Last Post
No new posts Not able to receive any emails. Jim John Postfix 5 Wed Jul 05, 2006 5:30 pm
No new posts Date in emails Ronald Wiplinger Qmail 2 Thu Jun 22, 2006 11:37 pm
No new posts Blank emails Mike Jones Exim 5 Mon Jun 19, 2006 9:33 am
No new posts Unable to receive emails( couldn't find a mail exchanger ) denis labon Postfix 6 Wed Jun 14, 2006 6:54 pm
No new posts a copy of send emails Francisco Morales Qmail 1 Tue Jun 13, 2006 7:29 am

Credit Card Consolidation | Remortgaging | Credit Card | Cell Phones | Mortgage Calculator
Copyright © 2004-2005 DeniX Solutions SRL
 
Other DeniX Solutions sites: Unix/Linux blog |  electronics forum |  medicine forum |  science forum | 
Privacy Policy


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.4560s ][ Queries: 16 (0.1757s) ][ GZIP on - Debug on ]