From owner-freebsd-isp  Thu Mar 25  1:59: 5 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from bmccane.maxbaud.net (baud225.maxbaud.net [12.13.66.225])
	by hub.freebsd.org (Postfix) with ESMTP id F227D14BE9
	for <freebsd-isp@freebsd.org>; Thu, 25 Mar 1999 01:58:42 -0800 (PST)
	(envelope-from root@bmccane.maxbaud.net)
Received: from localhost (root@localhost)
	by bmccane.maxbaud.net (8.9.2/8.9.2) with SMTP id DAA60139
	for <freebsd-isp@freebsd.org>; Thu, 25 Mar 1999 03:58:16 -0600 (CST)
	(envelope-from root@bmccane.maxbaud.net)
Date: Thu, 25 Mar 1999 03:58:15 -0600 (CST)
From: Wm Brian McCane <root@bmccane.maxbaud.net>
To: freebsd-isp@freebsd.org
Subject: E-mail spoof?
Message-ID: <Pine.BSF.3.96.990325035345.59847A-100000@bmccane.maxbaud.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Greetings,
	I got an email message with headers as follows:

> Return-Path: <.@nest.se>
> Received: from ads.sellit-here.com (gamestation.maxbaud.net [12.13.66.202] (may be forged))
> 	by bmccane.maxbaud.net (8.9.2/8.9.2) with ESMTP id DAA57205
> 	for <bmccane@bmccane.maxbaud.net>; Thu, 25 Mar 1999 03:28:29 -0600 (CST)
> 	(envelope-from .@nest.se)
> Received: from laban.nest.se (laban.nest.se [194.52.146.70])
> 	by ads.sellit-here.com (8.9.3/8.9.2) with ESMTP id DAA17168
> 	for <bmccane@maxbaud.net>; Thu, 25 Mar 1999 03:28:15 -0600 (CST)
> 	(envelope-from .@nest.se)
> Message-Id: <199903250928.DAA17168@ads.sellit-here.com>
> Received: from laban.nest.se ([208.254.108.184]) by laban.nest.se
>           (Netscape Mail Server v2.0) with SMTP id AEK214;
>           Wed, 24 Mar 1999 18:56:47 +0100
> To: user@the_internet.com
> Date: Wed, 24 Mar 99 09:38:36 EST
> From: .@ads.maxbaud.net
> Subject: Hi Sexy,I am lonely waiting for you to call me. 
> Status:   

It would appear that whoever sent this machine may have used my machine to
send spam.  I assume this because it has a "From: " address that is "on my
machine", ie. '.@ads.maxbaud.net'.

	1) Did my machine relay spam?
	2) If so, can I block this type of use.
	3) Yes, I have relaying blocked from outside my domain(s).

    brian



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message