Results 1 to 3 of 3
  1. #1
    Join Date
    Aug 2003

    Track origin of spam sent from server

    It seems that a few spam email were sent from my server.
    I looked at the raw source of the mail, I see what user sent it to exim.
    I would like to know how can I find out if it was sent from a smtp account or thru an unsecure form.
    I know the user and he did not send the spam... there are no form script on his site either. So either it's a spyware on his pc that's sending it? or it someone could have stolen his login id?

  2. #2
    do you mind pasting the headers. Perhaps it is just an email address spoofing?
    Like us on Facebook to qualify for discounts!
    Offering: | Internap FCP Bandwidth! | Rebootless Kernel Updates! | Magento Optimized Hosting | Wordpress Hosting |
    Services: | Managed Multiple Cores 64bit Servers | Server Management |

  3. #3
    Join Date
    Aug 2003
    It's not spoofing. My IP is whitelisted with AOL. When a AOL user get a mail from my server and click "report this as spam" they send it back to me.

    X-AOL-DATE: Wed, 28 Apr 2004 11:45:21 PM Eastern Daylight Time
    Return-Path: <[email protected]>
    Received: from ( []) by (v98.19) with ESMTP id MAILINYH31-2bc40907a2f221; Wed, 28 Apr 2004 23:45:21 -0400
    Received: from ( []) by (v98.5) with ESMTP id MAILRELAYINYH310-2bc40907a2f221; Wed, 28 Apr 2004 23:44:49 -0500
    Received: from username by with local (Exim 4.24)
    id 1BJ2TW-0002GJ-RU; Wed, 28 Apr 2004 20:44:38 -0700
    To: <Undisclosed Recipients>
    From: [email protected]
    To: <Undisclosed Recipients>
    From: [email protected]
    Subject: New Stock Watch . . XKY /Z UKR4 rutEJ5 Mb 2M
    Content-Type: multipart/mixed;
    Message-Id: <[email protected]>
    Date: Wed, 28 Apr 2004 20:44:38 -0700
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname -
    X-AntiAbuse: Original Domain -
    X-AntiAbuse: Originator/Caller UID/GID - [32025 32014] / [47 12]
    X-AntiAbuse: Sender Address Domain -

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts