Hi Everyone,
I could still use some help with my spam/blacklist problem. I've verified
through the abuse.net relay test that I am not relaying and I do have a
valid PTR record.
I know that something is generating spam from all the reject emails I'm
getting (see below).
I assume that a PHP or CGI script is cranking out the spam but how can I
tell what is doing it?? The server logs are not any help and the site's
email reports don't show any increased activity.
How can I tell what is sending the spam??
Thanks,
Don
**************************************************
The original message was received at Mon, 19 Nov 2007 12:00:48 -0500
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<x520815 (at mark) tomail.com.tw>
<x5257 (at mark) tomail.com.tw>
<x53041 (at mark) tomail.com.tw>
<x5341 (at mark) tomail.com.tw>
<x53522bb (at mark) tomail.com.tw>
<x5353 (at mark) tomail.com.tw>
<x5398 (at mark) tomail.com.tw>
<x5458844 (at mark) tomail.com.tw>
<x5471 (at mark) tomail.com.tw>
<x5510 (at mark) tomail.com.tw>
<x556688 (at mark) tomail.com.tw>
<x55921 (at mark) tomail.com.tw>
<x5770012 (at mark) tomail.com.tw>
<x5797 (at mark) tomail.com.tw>
<x57lst (at mark) tomail.com.tw>
<x5812000 (at mark) tomail.com.tw>
<x5825447 (at mark) tomail.com.tw>
<x5907123 (at mark) tomail.com.tw>
<x5921 (at mark) tomail.com.tw>
<x614snow (at mark) tomail.com.tw>
<x6200787 (at mark) tomail.com.tw>
<x6334683 (at mark) tomail.com.tw>
<x64610 (at mark) tomail.com.tw>
<x6519283 (at mark) tomail.com.tw>
<x6572 (at mark) tomail.com.tw>
<x65725 (at mark) tomail.com.tw>
<x660611 (at mark) tomail.com.tw>
<x6610191 (at mark) tomail.com.tw>
<yurlc (at mark) tomail.com.tw>
<yurn (at mark) tomail.com.tw>
<yuroci00 (at mark) tomail.com.tw>
<yuroom (at mark) tomail.com.tw>
<yurphm (at mark) tomail.com.tw>
<yuru (at mark) tomail.com.tw>
<yurungfu (at mark) tomail.com.tw>
<yus (at mark) tomail.com.tw>
<yus08 (at mark) tomail.com.tw>
<yus39287 (at mark) tomail.com.tw>
<yusallw (at mark) tomail.com.tw>
<yusam1 (at mark) tomail.com.tw>
<yusan (at mark) tomail.com.tw>
<yusanbb (at mark) tomail.com.tw>
<yusanlin (at mark) tomail.com.tw>
<yusanltd (at mark) tomail.com.tw>
<yuschang (at mark) tomail.com.tw>
<yuscoop (at mark) tomail.com.tw>
<yusd (at mark) tomail.com.tw>
<yusen333 (at mark) tomail.com.tw>
<yush222 (at mark) tomail.com.tw>
<yusha (at mark) tomail.com.tw>
<yushen66 (at mark) tomail.com.tw>
<yusheng (at mark) tomail.com.tw>
<yusheng6 (at mark) tomail.com.tw>
<yushian (at mark) tomail.com.tw>
<yushih (at mark) tomail.com.tw>
<yushin1 (at mark) tomail.com.tw>
<yushin65 (at mark) tomail.com.tw>
<yushoou (at mark) tomail.com.tw>
<yushuan (at mark) tomail.com.tw>
<yushue (at mark) tomail.com.tw>
<yushulee (at mark) tomail.com.tw>
<yushumei (at mark) tomail.com.tw>
<yushuyi (at mark) tomail.com.tw>
<yushyang (at mark) tomail.com.tw>
<yushyr12 (at mark) tomail.com.tw>
<yusicbom (at mark) tomail.com.tw>
<yusich (at mark) tomail.com.tw>
<yusien (at mark) tomail.com.tw>
<yusiong (at mark) tomail.com.tw>
<yusl5168 (at mark) tomail.com.tw>
<yuslcs (at mark) tomail.com.tw>
<yusnke29 (at mark) tomail.com.tw>
<yussellr (at mark) tomail.com.tw>
<yussu (at mark) tomail.com.tw>
<yustd (at mark) tomail.com.tw>
<yustj (at mark) tomail.com.tw>
----- Transcript of session follows -----
554 5.0.0 MX list for tomail.com.tw. points back to msi.mydomain.net
554 5.3.5 Local configuration error