Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Jan 2007 21:25:44 -0600 (CST)
From:      Lars Eighner <luvbeastie@larseighner.com>
To:        "Rob W." <rob@fiberuplink.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Mail being sent from my domain...
Message-ID:  <20070105212536.G8738@tbbqjvyy.6qbyyneqvnyhc.pbz>
In-Reply-To: <00bb01c73134$b061fa60$0a32a8c0@rob>
References:  <00bb01c73134$b061fa60$0a32a8c0@rob>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 5 Jan 2007, Rob W. wrote:

> Is it possible for people to send email out from my domain name and have
> fake users acting as comming from my network?

Yes, if you have defeated the security features of your mail server either
accidentally or on purpose, but that is not what is happening in this case.
There appears to be a recurrance (or mutation) of a virus we have seen
before.  The mail is not originating on your server.  Your domain is being
spoofed by the infected computer(s).  The forged mail probably would not
escape detection by a knowledgeable human, but it is good enough to fool
some autoresponders and mail tossers, which is why you get the bounces.

-- 
Lars Eighner
http://www.larseighner.com/index.html
8800 N IH35 APT 1191 AUSTIN TX 78753-5266




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070105212536.G8738>