[ILUG] spammers at work?

[Dave Burke]

Possibly. 
But we've also seen over the past while, spammers just sending out a load of 
emails with email address that might be right. If they get through, they get 
through, if they don't the reply to address is someone elses domain. We're had 
incidents in the past couple of months, where customers mail servers have been 
overwhelmed by getting thousands of bounce backs.


Dave


Donncha O Caoimh wrote:
>
>Saw lots of "Unknown User" warnings in my Logwatch this morning so I
>went looking at /var/log/maillog, here's a bit from the log..
>
>Mar 12 02:44:40 mail sendmail[5993]: g2C2ier05993:
><fish at tradesignals.com>... User unknown
>Mar 12 02:44:40 mail sendmail[5993]: g2C2ier05993:
><randall at tradesignals.com>... User unknown
>Mar 12 02:44:40 mail sendmail[5993]: g2C2ier05993:
><rene at tradesignals.com>... User unknown
>Mar 12 02:44:40 mail sendmail[5993]: g2C2ier05993:
><maria at tradesignals.com>... User unknown
>Mar 12 02:44:40 mail sendmail[5993]: g2C2ier05993:
><louis at tradesignals.com>... User unknown
>
>[snipped about 20 other "User unknown" lines..
>
>Mar 12 02:44:41 mail sendmail[5993]: g2C2ier05993:
><general at tradesignals.com>... User unknown
>Mar 12 02:44:41 mail sendmail[5993]: g2C2ier05993:
><lawrence at tradesignals.com>... User unknown
>Mar 12 02:44:42 mail sendmail[5993]: g2C2ier05993:
>from=<john at digitalisp.net>, size=0, class=0, nrcpts=0, proto=SMTP,
>daemon=MTA, relay=rlkal1a052.comtech-data.se [194.198.208.52] (may be
>forged)
>
>That's someone fishing for email addresses isn't it? 
>
>Donncha.
>
>-- 
>Irish Linux Users' Group: ilug at linux.ie
>http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
>List maintainer: listmaster at linux.ie
>