Identify network ID which is creating spam!

Md.Abul Quashem · 02-23-2010, 07:49 AM

Dear All,
Recently I saw from my sendmail logs that huge unknown accounts (same domain (my domain) to and from) hit and send the mails. that's why my mail is stoped for a while...it's like from trusted localhost..

If you got my point, please help me how can I get my local IP which is creating spam..
Thanks in advance ...

smoker · 02-23-2010, 08:16 AM

Do you require authentication before sending ?
Have you got an open relay ?
http://www.spamlinks.net/prevent-sec...y-test.htm#web

http://www.sendmail.org/~ca/email/auth.html

TB0ne · 02-23-2010, 11:23 AM

Quote:

Originally Posted by Md.Abul Quashem

Dear All,
Recently I saw from my sendmail logs that huge unknown accounts (same domain (my domain) to and from) hit and send the mails. that's why my mail is stoped for a while...it's like from trusted localhost..

If you got my point, please help me how can I get my local IP which is creating spam..
Thanks in advance ...

Well, if you see them in your mail logs, you should see which machine they're being forwarded from, either host name or IP address.

If not, you can increase the sendmail logging verbosity, to include more details. The docs on the sendmail site can tell you how.