unknown account in my mail server weird???
 

hello people:)

this afternoon went i read my maillog in my mail server one of my user received an email coming from ex. "james@xxx.com" and in my knowlege there no one name... james in my mail account... i try to finger command in my linux box but there no one name james????in my account?? weird:( what maybe the possible reason an outsider can email my local user and masquerade as a local user "james@xxx.com" my domin ex is "xxx.com"
can you try to help me people........... thk!!!

What from field are you referring to ? Header from or ? From fields are easily be facted - does your maillog show the IP of the machine that sent the message ?

Michael.

header from. nope only the ip address of the relay server of my isp.

Sounds like header manipulation. They forge the information to look like what you see. Can you post the header information and maybe we can see more details?

oops.... i erase it:) but if i see it again i will try to post it:)
for now i try to monitor my maillog and it doesnt appear anymore in my maillog.