Date:  Thu, 2 Jul 2009 14:15:18 -0400
From:  "Darrell D. Mobley" <dmobley (at mark) uhostme.com>
Subject:  [coba-e:15776] Re: spam problem w/ email - hope not serious
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <904EFB3C55F44A8C8339993213121DAD@HP9925NR>
In-Reply-To:  <4A4CF38A.3080200 (at mark) nomealaska.org>
References:  <876189.91068.qm (at mark) web65607.mail.ac4.yahoo.com> <4A4BADBB.2060300 (at mark) nomealaska.org> <4A4CF38A.3080200 (at mark) nomealaska.org>
X-Mail-Count: 15776

> -----Original Message-----
> From: Jim Dory [mailto:jdory (at mark) nomealaska.org]
> Sent: Thursday, July 02, 2009 1:51 PM
> To: coba-e (at mark) bluequartz.org
> Subject: [coba-e:15775] Re: spam problem w/ email - hope not serious
> 
> > \
> > Jul  1 10:27:12 srv1 sendmail[11406]: n61IQgih011392: to="|
> > /home/nuonce/openwebmail/cgi-bin/openwebmail/owvacation.pl -t60s -a
> > jessie.led (at mark) nomealaska.org -a jessie_led (at mark) nomealaska.org -a
> > jessie (at mark) nomealaska.org  jessie", ctladdr=<jessie (at mark) nomealaska.org>
> > (523/100), delay=00:00:19, xdelay=00:00:11, mailer=prog, pri=121642,
> > dsn=2.0.0, stat=Sent
> > \
> >
> > Jul  1 10:27:47 srv1 sendmail[11605]: n61IRkLQ011605:
> > Authentication-Warning: srv1.nomecity.org: jessie set sender to
> > jessie (at mark) nomealaska.org using -f
> >
> >
> 
> Could it be the problem isn't so much dependent on the user as the email
> address, since the problem persisted after deleting the user and adding
> another? Maybe something to do with openwebmail? A completely new user
> but with same email address has the same problem. Thanks - Jim

Could it be the problem is a spammer, hedgerowsrvrk83 (at mark) lexoria.com, is
sending Jessie and email, and that is OWM trying to send a vacation message
back to the spammer?

The /home/nuonce/openwebmail/cgi-bin/openwebmail/owvacation.pl seems to
indicate the activity is coming from OWM's vacation script.