someone is using my email address to spam, is there a way to stop this ?

[Marc Lanctot]

Dave,

For each one of these contact the administrator of the recipient mail 
system. You see in the Received .... by (systemname). The highest 
(topmost) one in the list will be it's eventual destination. Do a whois 
on both the recipient's domain as in the To: line and in the systemname 
of the eventual destination. Those guys have information about where the 
mail came from, even if it bounces.

In the case below, you can find the admin/tech contacts by doing a whois 
on rin.nl and firehosting.nl. Explain the situation to them and send 
them the header of these bounce-backs.

Chances are it will not fix your problem in the short term (I don't know 
a way this can be fixed).. and even if the remote admins do anything 
about it they might not catch the spammer because they are probably 
using open relays, but if that's the case then at least the open relays 
can be identified and shut down. If the spammer used an SMTP server from 
a trackable source (an ISP), then maybe we'll get lucky and there'll be 
one less spammer out there ruining the Internet (or one more 
virus-infected Windows machine spotted?) :)

Marc



Dave Cramer wrote:
> 
> On 9-Aug-08, at 4:23 PM, Madison Kelly wrote:
> 
>> Dave Cramer wrote:
>>> subject is self explanatory,
>>> I'm getting all the bounces, any help would be appreciated.
>>> I know it will stop eventually, but in the meantime it's a PITA.
>>> --dc--
>>
>> Can you post an example of one of these emails? Specifically, the full 
>> header? I suspect shenanigans.
>>
> 
> Sure
> 
> This message was created automatically by mail delivery software.
> 
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
> 
>  postmaster-o6o4ZEf+ljE at public.gmane.org <mailto:postmaster-o6o4ZEf+ljE at public.gmane.org>
> 
> 
> ------ This is a copy of the message, including all the headers. ------
> 
> Return-path: <dave-MPR1dlbY4k5UZvwwRG+OOeTW4wlIGRCZ at public.gmane.org <mailto:dave-MPR1dlbY4k5UZvwwRG+OOeTW4wlIGRCZ at public.gmane.org>>
> Received: from [199.172.211.27] (helo=27.ppp-dhcp.logic.bm)
> by free1.firehosting.nl with esmtp (Exim 4.62)
> (envelope-from <dave-MPR1dlbY4k5UZvwwRG+OOeTW4wlIGRCZ at public.gmane.org 
> <mailto:dave-MPR1dlbY4k5UZvwwRG+OOeTW4wlIGRCZ at public.gmane.org>>)
> id 1KRtLs-000BwO-Cp
> for postmaster-o6o4ZEf+ljE at public.gmane.org <mailto:postmaster-o6o4ZEf+ljE at public.gmane.org>; Sat, 09 Aug 2008 
> 20:39:44 +0200
> Message-ID: <000701c8fa4f$03a58cba$66776fb1 at ekeyy>
> From: "killie sph" <dave-MPR1dlbY4k5UZvwwRG+OOeTW4wlIGRCZ at public.gmane.org 
> <mailto:dave-MPR1dlbY4k5UZvwwRG+OOeTW4wlIGRCZ at public.gmane.org>>
> To: "burr bertrand" <postmaster-o6o4ZEf+ljE at public.gmane.org <mailto:postmaster-o6o4ZEf+ljE at public.gmane.org>>
> Subject: PssstUSA Players! Find BIG THINGS & 2400$
> Date: Sat, 09 Aug 2008 16:52:16 +0000
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0004_01C8FA4F.03A17DBB"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.3138
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
>>
> 
> 


-- 
A computer without Windows is like chocolate cake without mustard.
   -- Unknown
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists