OMFG exim + spam :cry: :cry: please help
There is 1 guy relaying though me and i cant figure out whats wrong...
I installed APF and added the IP to deny list...but this guy still keep sending spam..i dont know if its an outside user or if its a php scrip...but this guy sends out a spam message every second...check this:
2004-06-22 18:39:46 1BcqBO-0000BO-TF <= mwine@miportal.es U=nobody P=local S=4539
2004-06-22 18:39:48 1BcqBO-0000BO-TF => sequenza@arnet.com.ar R=lookuphost T=remote_smtp H=lobosuelto.arnet.com.ar [200.45.191.163]
2004-06-22 18:39:48 1BcqBO-0000BO-TF Completed
2004-06-22 18:39:52 1BcqBU-0000BT-Nj <= mwine@miportal.es U=nobody P=local S=4545
2004-06-22 18:39:57 1BcqBU-0000BT-Nj => ser@serempresario.com.ar R=lookuphost T=remote_smtp H=mx.serempresario.com.ar [200.32.3.109]
2004-06-22 18:39:57 1BcqBU-0000BT-Nj Completed
2004-06-22 18:39:58 1BcqBa-0000Bd-Kg <= mwine@miportal.es U=nobody P=local S=4541
2004-06-22 18:39:59 1BcqBa-0000Bd-Kg => serafinfalvo@yahoo.com R=lookuphost T=remote_smtp H=mx1.mail.yahoo.com [64.156.215.19]
2004-06-22 18:39:59 1BcqBa-0000Bd-Kg Completed
2004-06-22 18:40:04 1BcqBg-0000Cl-H4 <= mwine@miportal.es U=nobody P=local S=4543
2004-06-22 18:40:09 1BcqBg-0000Cl-H4 => serafinip@la-ley.com.ar R=lookuphost T=remote_smtp H=wwwlaleysrv.la-ley.com.ar [200.59.132.228]
2004-06-22 18:40:09 1BcqBg-0000Cl-H4 Completed
2004-06-22 18:40:10 1BcqBm-0000Cz-Eo <= mwine@miportal.es U=nobody P=local S=4553
2004-06-22 18:40:12 1BcqBm-0000Cz-Eo => serbiangabian@topmail.com.ar R=lookuphost T=remote_smtp H=s1.topmail.com.ar [200.9.212.221]
2004-06-22 18:40:12 1BcqBm-0000Cz-Eo Completed
2004-06-22 18:40:17 1BcqBt-0000DB-0X <= mwine@miportal.es U=nobody P=local S=4535
2004-06-22 18:40:18 1BcqBt-0000DB-0X ** sercoin@satlink.com R=lookuphost T=remote_smtp: SMTP error from remote mailer after RCPT TO:<sercoin@satlink.com>: host infomail2.infovia.com.ar [200.51.80.8]: 550 5.1.1 unknown or illegal alias: sercoin@satlink.com
2004-06-22 18:40:18 1BcqBu-0000DF-31 <= <> R=1BcqBt-0000DB-0X U=mailnull P=local S=5496
2004-06-22 18:40:18 1BcqBt-0000DB-0X Completed
2004-06-22 18:40:18 1BcqBu-0000DF-31 == mwine@miportal.es R=lookuphost T=remote_smtp defer (-53): retry time not reached for any host
2004-06-22 18:40:25 1BcqC1-0000DS-27 <= mwine@miportal.es U=nobody P=local S=4541
2004-06-22 18:40:27 1BcqC1-0000DS-27 => serduca@citynet.net.ar R=lookuphost T=remote_smtp H=mailer1.prima.com.ar [200.42.0.132]
2004-06-22 18:40:27 1BcqC1-0000DS-27 Completed
2004-06-22 18:40:34 1BcqCA-0000Dl-0A <= mwine@miportal.es U=nobody P=local S=4545
2004-06-22 18:40:35 1BcqC8-0000Db-Lx H=(x004530185) [62.100.18.161] F=<haris@haris.demon.nl> rejected after DATA: This message contains a virus or other harmful content (Worm.Bagle.Gen-1)
2004-06-22 18:40:35 1BcqCA-0000Dl-0A => sereday@interlink.com.ar R=lookuphost T=remote_smtp H=mailhub.interlink.com.ar [200.69.2.60]
2004-06-22 18:40:35 1BcqCA-0000Dl-0A Completed
2004-06-22 18:40:41 1BcqCF-0000Ds-LV H=(x004530185) [62.100.18.161] F=<haris@haris.demon.nl> rejected after DATA: This message contains a virus or other harmful content (Worm.Bagle.Gen-1)
2004-06-22 18:40:42 1BcqCI-0000E1-JS <= mwine@miportal.es U=nobody P=local S=4543
2004-06-22 18:40:44 1BcqCI-0000E1-JS => seredicz@citynet.net.ar R=lookuphost T=remote_smtp H=mailer1.prima.com.ar [200.42.0.132]
2004-06-22 18:40:44 1BcqCI-0000E1-JS Completed
2004-06-22 18:40:47 1BcqCK-0000E0-SH H=(x004530185) [62.100.18.161] F=<haris@haris.demon.nl> rejected after DATA: This message contains a virus or other harmful content (Worm.Bagle.Gen-1)
2004-06-22 18:40:47 1BcqBD-0000BG-7t => senzar@cvtci.com.ar R=lookuphost T=remote_smtp H=mail.cvtci.com.ar [24.232.0.19]
2004-06-22 18:40:47 1BcqBD-0000BG-7t Completed
2004-06-22 18:40:51 1BcqCR-0000E9-33 <= mwine@miportal.es U=nobody P=local S=4555
2004-06-22 18:40:59 1BcqCZ-0000EI-FA <= mwine@miportal.es U=nobody P=local S=4539
2004-06-22 18:41:08 1BcqCi-0000ES-1z <= mwine@miportal.es U=nobody P=local S=4549
2004-06-22 18:41:10 1BcqCi-0000ES-1z => sergio.mosca@sacsom.com.ar R=lookuphost T=remote_smtp H=virtd.datamarkets.com.ar [200.42.0.151]
2004-06-22 18:41:10 1BcqCi-0000ES-1z Completed
2004-06-22 18:41:13 1BcqCZ-0000EI-FA => serfood@ciudad.com.ar R=lookuphost T=remote_smtp H=postino9.prima.com.ar [200.42.0.180]
2004-06-22 18:41:13 1BcqCZ-0000EI-FA Completed
2004-06-22 18:41:15 1BcqCp-0000Ec-27 <= mwine@miportal.es U=nobody P=local S=4533
2004-06-22 18:41:23 1BcqCx-0000Es-5a <= mwine@miportal.es U=nobody P=local S=4545
2004-06-22 18:41:31 1BcqD5-0000F0-H8 <= mwine@miportal.es U=nobody P=local S=4561
2004-06-22 18:41:32 1BcqCx-0000Es-5a => sergiobek@netizen.com.ar R=lookuphost T=remote_smtp H=antispam.netizen.com.ar [200.49.96.70]
2004-06-22 18:41:32 1BcqCx-0000Es-5a Completed
2004-06-22 18:41:33 1BcqD5-0000F0-H8 => enrique_cicerchia@cabot-corp.com R=lookuphost T=remote_smtp H=smtp1.cabot-corp.com [199.164.25.2]
2004-06-22 18:41:33 1BcqD5-0000F0-H8 Completed
2004-06-22 18:41:39 1BcqDD-0000F9-3L <= mwine@miportal.es U=nobody P=local S=4539
2004-06-22 18:41:45 1BcqDJ-0000FP-0q <= mwine@miportal.es U=nobody P=local S=4545
2004-06-22 18:41:47 1BcqCR-0000E9-33 == sereventos@empresariosmix.com R=lookuphost defer (-1): host lookup did not complete
2004-06-22 18:41:50 1BcqDD-0000F9-3L => sergior@salnet.com.ar R=lookuphost T=remote_smtp H=ns1.salnet.com.ar [200.70.50.2]
2004-06-22 18:41:50 1BcqDD-0000F9-3L Completed
2004-06-22 18:41:50 1BcqDO-0000FT-SS <= mwine@miportal.es U=nobody P=local S=4533
2004-06-22 18:41:54 1BcqDO-0000FT-SS => serif@arnet.com.ar R=lookuphost T=remote_smtp H=lobosuelto.arnet.com.ar [200.45.191.163]
2004-06-22 18:41:54 1BcqDO-0000FT-SS Completed
2004-06-22 18:41:56 1BcqDU-0000FY-R7 <= mwine@miportal.es U=nobody P=local S=4539
2004-06-22 18:41:58 1BcqDJ-0000FP-0q => seriarte@fibertel.com.ar R=lookuphost T=remote_smtp H=mx1.fibertel.com.ar [24.232.0.226]
2004-06-22 18:41:58 1BcqDJ-0000FP-0q Completed
everytime the sender is mwine@miportal.es right?
How the hell do i stop him from doing this...i dont want to get more warnings from my server provider
Plz dont tell me to hire someone ....not everyone is rich
Cya's.
Ley.
