Download your favorite Linux distribution at LQ ISO.
Go Back > Forums > Linux Forums > Linux - Software
User Name
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.


  Search this Thread
Old 03-05-2009, 10:40 AM   #1
LQ Newbie
Registered: Mar 2009
Posts: 1

Rep: Reputation: 0
Exim Spam - spoofing From: same as To:

I have an Exim4 installation on Debian and have noticed the last few months a sharp rise in spam where the From: is spoofing the To: and bypasses my reverse dns checking. He'here's an example:

2009-03-05 03:52:06 1Lf9JB-00049c-Sl <= shadow@<mydomain>.ca [] P=smtp S=3389
2009-03-05 03:52:06 1Lf9JB-00049c-Sl => blackhole (local_scan discarded recipients)

I have the reverse dns checking setup and it works very well but somehow when it claims to be an email from my domain it gets by. The only thing to catch it is spamassassin which blackholes it.

Another example:

2009-03-05 10:52:39 1LfFs7-0004Yc-CV <= postmaster@<mydomain>.ca [] P=smtp S=5661
2009-03-05 10:52:39 1LfFs7-0004Yc-CV => blackhole (local_scan discarded recipients)

Is there a way to stop this spoofing or reject it the same way reverse dns checking does for fake domains?
Old 03-05-2009, 01:14 PM   #2
Registered: Feb 2006
Distribution: Debian Sid
Posts: 792

Rep: Reputation: 331Reputation: 331Reputation: 331Reputation: 331
I recently had what I thought was an exim relay problem (link). Turned out to be something else.

Anyway, in my searching for a solution I found this on the Exim forum.




Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Spam prevention with Exim and greylistd - Part 1 LXer Syndicated Linux News 0 09-22-2008 09:20 AM
Exim+ASSP(Anti Spam SMTP Proxy) piyushmap Linux - Networking 0 02-28-2008 01:12 AM
Exim mail monitor for discovering outgoing spam/viruses TheSpork Linux - Software 0 11-30-2004 03:14 AM
Exim4/ sa-exim/Spamassassin - Flags as Spam but Still Accepts jonwatson Linux - Software 4 11-29-2004 06:18 PM
EXIM - sending spam from PHP scrips GRisha Linux - Software 0 06-05-2004 11:07 AM > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 05:37 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration