[Dshield] Whatever it was (admin@) - it's expanding

David Hart hart401 at TQMcube.com
Fri Aug 1 23:22:58 GMT 2003


In the last two hours we rejected (thank you Postfix) 18 of these things
- mostly connecting from a DSL on PacBell. Ironically our mail to
PacBell abuse was rejected (Osirus has us as dynamic - we are not).

Aug  1 18:46:48 mail postfix/smtpd[2181]: 462CF2C16F:
client=adsl-64-172-199-53.dsl.lsan03.pacbell.net[64.172.199.53]

Aug  1 18:46:51 mail postfix/smtpd[2181]: 462CF2C16F: reject: RCPT from
adsl-64-172-199-53.dsl.lsan03.pacbell.net[64.172.199.53]: 550
<admin at tqmcube.com>: Sender address rejected:
Message-from-MailAdministrator-TQMcube: Forged address. You are NOT in
our domain.; from=<admin at tqmcube.com> to=<exmachina at tqmcube.com>
proto=SMTP helo=<localhost>

Aug  1 18:46:55 mail postfix/smtpd[2181]: lost connection after RCPT
from adsl-64-172-199-53.dsl.lsan03.pacbell.net[64.172.199.53]

Aug  1 18:46:55 mail postfix/smtpd[2181]: disconnect from
adsl-64-172-199-53.dsl.lsan03.pacbell.net[64.172.199.53]




More information about the list mailing list