From owner-freebsd-isp Tue Jan 22 15:51:25 2002 Delivered-To: freebsd-isp@freebsd.org Received: from vyrus.net (vyrus.net [216.26.167.49]) by hub.freebsd.org (Postfix) with ESMTP id 4D5BE37B434 for ; Tue, 22 Jan 2002 15:50:54 -0800 (PST) Received: from localhost (todd@localhost) by vyrus.net (8.11.1/8.11.1) with ESMTP id g0MNlaL60648 for ; Tue, 22 Jan 2002 18:47:38 -0500 (EST) (envelope-from todd@vyrus.net) Date: Tue, 22 Jan 2002 18:47:36 -0500 (EST) From: Todd To: freebsd-isp Subject: Spam issue Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Greetings. Recently a friend of mine started receiving a lot of bounced messages to his root mail acct on a FreeBSD 4.1 machine that he has. It looks as though someone is using him as a spam relay. He is running Sendmail ver 8.11 and has relay denied. According to the times indicated on the bounced email headers, the following is an entry from his maillog that corresponds with the spamming: Jan 22 13:03:00 sendmail[8981]: g0MD30608981: from=root, size=269, class=0, nrcpts=1, msgid=<200201221303.g0MD30608981@friendsdomain>, relay=root@localhost Jan 22 13:03:00 sendmail[8981]: g0MD30608981: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30269, dsn=2.0.0, stat=Sent Has anyone come across this? Know where to start? Thanks. - Todd To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message