Spoofed Sending hosts?

ExoCrew

Verified User
Joined
Jun 21, 2005
Messages
21
I saw these in my "Top 50 sending hosts by volume"

12 1558KB 130KB ge3.i-nonymous.com
67 1447KB 22KB localhost
275 1382KB 5146 brimestone.specialservers.com
34 1033KB 30KB mxsmfpool21.ebay.com
30 829KB 28KB mxsmfpool20.ebay.com
29 808KB 28KB mxsmfpool22.ebay.com
28 787KB 28KB mxsmfpool23.ebay.com
32 648KB 20KB owmta2-2.ientrynetwork.net
38 603KB 16KB outbound1.den.paypal.com

Is there any way to block such activity?

Moreover, I am seeing messages being relayed by someone who isn't hosted on the server, example:
Code:
      1 host86-139-127-xx.range86-xx.btcentralplus.com[86.139.127.183] [B][email protected] [/B]
      => easymx2.exxxx.xx.xx[212.53.64.68] [email protected]

I guess the abuse is from SMTP and not from local apache/php mail. I am using SpamBlocker 3.x exim.conf.

I have looked around for a way to drop any outgoing email where the sender / From is not a local domain. Is there any way to drop emails in such a way? I keep getting blocked from CBL for this reason.
 
Moreover, I am seeing messages being relayed by someone who isn't hosted on the server

How do you know? You cannot tell just by looking at email addresses or domains. That is if you are talking about someone and not some domain not hosted on the server.

I have looked around for a way to drop any outgoing email where the sender / From is not a local domain. Is there any way to drop emails in such a way?

Many times your users may want/need to use your server to send mail from domains not hosted on your server.

If you want to drop email from domains that you know your users would not be using such as @ebay.com and @paypal.com

http://www.webhostgear.com/338.html
 
Back
Top