Index: [Article Count Order] [Thread]

Date:  Thu, 02 Jul 2009 09:51:06 -0800
From:  Jim Dory <jdory (at mark) nomealaska.org>
Subject:  [coba-e:15775] Re: spam problem w/ email - hope not serious
To:  coba-e (at mark) bluequartz.org
Message-Id:  <4A4CF38A.3080200 (at mark) nomealaska.org>
In-Reply-To:  <4A4BADBB.2060300 (at mark) nomealaska.org>
References:  <876189.91068.qm (at mark) web65607.mail.ac4.yahoo.com> <4A4BADBB.2060300 (at mark) nomealaska.org>
X-Mail-Count: 15775

Jim Dory wrote:
>
> I deleted the user jenns and created another but gave the same email 
> address to (jessie (at mark) nomealaska.org). Still having the same problem, 
> rather immediately after making the change. It looks like the user is 
> still trying to send maybe spam to hedgerowsrvrk83 (at mark) lexoria.com and the 
> actual user is on vacation, inactive, and her computer is off. Still 
> getting the Authentication-Warning (at the bottom) for this account 
> only (out of about 25).
>
>
> Here's some maillog with grep the user (I've changed names to protect 
> the innocent):
>
> \
> Jul  1 10:27:12 srv1 sendmail[11406]: n61IQgih011392: to="| 
> /home/nuonce/openwebmail/cgi-bin/openwebmail/owvacation.pl -t60s -a 
> jessie.led (at mark) nomealaska.org -a jessie_led (at mark) nomealaska.org -a 
> jessie (at mark) nomealaska.org  jessie", ctladdr=<jessie (at mark) nomealaska.org> 
> (523/100), delay=00:00:19, xdelay=00:00:11, mailer=prog, pri=121642, 
> dsn=2.0.0, stat=Sent
> \
>
> Jul  1 10:27:47 srv1 sendmail[11605]: n61IRkLQ011605: 
> Authentication-Warning: srv1.nomecity.org: jessie set sender to 
> jessie (at mark) nomealaska.org using -f
>
>

Could it be the problem isn't so much dependent on the user as the email 
address, since the problem persisted after deleting the user and adding 
another? Maybe something to do with openwebmail? A completely new user 
but with same email address has the same problem. Thanks - Jim

-- 
Jim Dory
Engineering
City of Nome
PO Box 281
102 Division St.
Nome, AK 99762
907.443.6604

http://www.nomealaska.org


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.