Spam - Smtp

[DRKT]

Hi!

for the last couple of days ive been receiving these sorts of emails. im not sure why. im wondering if after installing the IMAP server, it didnt somehow open up my SMTP to the world..how can i make sure that SMTP is only used locally, or at least with authentication?

ex:

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

Reporting-MTA: dns; mail46-red-R.bigfish.com
Arrival-Date: Thu, 10 Jun 2004 21:34:47 +0000 (UCT)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host 207.58.192.166[207.58.192.166] said: 550 5.1.1
<[email protected]>... User unknown (in reply to RCPT TO
command)

.....


other:

Reporting-MTA: dns;ncrmx07.tc.gc.ca
Received-From-MTA: dns;ncrmx42.tc.gc.ca
Arrival-Date: Thu, 10 Jun 2004 15:19:24 -0400

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.1.1

.....

 

[nobaloney]

When you get these emails you should check through /var/log/exim/mainlog to see if your system actually tried to send emails to these address at bluemountain.com.

If so, then you may have a spammer using your system.

If not, then you're being spoofed and bluemountain.com doesn't realize it.

Jeff