[SA-exim] how to deal with mail bounced to faked out id

[Aaron Stromas]

Hi,

All of the sudden I get spam rejected by various sites to the my mail server
because the sender address is faked to be in my domain. Any suggestion how
to deal with that situation. An example is below, (there is no "lesly" <
Robyn_Lovett at izoard.com>, obvously). TIA,

-a


----- Transcript of session follows -----
554 5.4.6 Too many hops 26 (25 max): from <Robyn_Lovett at izoard.com> via
localhost, to <webmaster at datafarm.com>

--jACNOvCu025413.1131837964/spool.hiway.co.uk
Content-Type: message/delivery-status

Reporting-MTA: dns; spool.hiway.co.uk <http://spool.hiway.co.uk>
Arrival-Date: Sat, 12 Nov 2005 22:33:40 GMT

Final-Recipient: RFC822; webmaster at datafarm.com
Action: failed
Status: 5.4.6
Diagnostic-Code: SMTP; 554 5.4.6 Too many hops
Last-Attempt-Date: Sat, 12 Nov 2005 23:26:04 GMT

Final-Recipient: RFC822; tsms at datafarm.com
Action: failed
Status: 5.4.6
Diagnostic-Code: SMTP; 554 5.4.6 Too many hops
Last-Attempt-Date: Sat, 12 Nov 2005 23:26:04 GMT

--jACNOvCu025413.1131837964/spool.hiway.co.uk
Content-Type: message/rfc822

Return-Path: <Robyn_Lovett at izoard.com>
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXeDc018709;
Sat, 12 Nov 2005 22:33:40 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXXWG024729;
Sat, 12 Nov 2005 22:33:33 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXeBu018703;
Sat, 12 Nov 2005 22:33:40 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXX5M024726;
Sat, 12 Nov 2005 22:33:33 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXeI2018700;
Sat, 12 Nov 2005 22:33:40 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXWxT024723;
Sat, 12 Nov 2005 22:33:32 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXeOE018697;
Sat, 12 Nov 2005 22:33:40 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXWkk024720;
Sat, 12 Nov 2005 22:33:32 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXdqL018693;
Sat, 12 Nov 2005 22:33:40 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXWjl024717;
Sat, 12 Nov 2005 22:33:32 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXdtE018690;
Sat, 12 Nov 2005 22:33:39 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXWNT024714;
Sat, 12 Nov 2005 22:33:32 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXdHv018683;
Sat, 12 Nov 2005 22:33:39 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXVXb024711;
Sat, 12 Nov 2005 22:33:31 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXdrS018680;
Sat, 12 Nov 2005 22:33:39 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXV5s024704;
Sat, 12 Nov 2005 22:33:31 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXcHT018675;
Sat, 12 Nov 2005 22:33:38 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXVoP024700;
Sat, 12 Nov 2005 22:33:31 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXcip018668;
Sat, 12 Nov 2005 22:33:38 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXUXv024695;
Sat, 12 Nov 2005 22:33:30 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXcgT018662;
Sat, 12 Nov 2005 22:33:38 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXUJw024691;
Sat, 12 Nov 2005 22:33:30 GMT
Received: from smtp01.altohiway.com <http://smtp01.altohiway.com> (
smtp01.altohiway.com <http://smtp01.altohiway.com>
[195.12.4.238<http://195.12.4.238>
])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with ESMTP
id jACMXcou018657;
Sat, 12 Nov 2005 22:33:38 GMT
Received: from spool.hiway.co.uk <http://spool.hiway.co.uk> (
spool.hiway.co.uk <http://spool.hiway.co.uk> [195.12.4.244<http://195.12.4.244>
])
by smtp01.altohiway.com <http://smtp01.altohiway.com> (8.13.1/8.13.1) with
ESMTP id jACMXUi2024685;
Sat, 12 Nov 2005 22:33:30 GMT
Received: from dsl01.83.171.146.101.nefkom.net<http://dsl01.83.171.146.101.nefkom.net>(
DSL01.83.171.146.101.NEFkom.net <http://DSL01.83.171.146.101.NEFkom.net> [
83.171.146.101 <http://83.171.146.101>])
by spool.hiway.co.uk <http://spool.hiway.co.uk> (8.13.2/8.13.1) with SMTP id
jACMXSZx018599;
Sat, 12 Nov 2005 22:33:32 GMT
Received: by 192.168.0.9 <http://192.168.0.9> with HTTP; Sat, 12 Nov 2005
14:32:16 -0800
Message-ID: <632k973e.9959783 at nyp.gov.sg>
Date: Sat, 12 Nov 2005 14:32:16 -0800
From: "lesly" <Robyn_Lovett at izoard.com>
User-Agent: Apple Mail (2.728)
X-PGP-Key:
tY6HVvYRo0YWNh5KYpt5tKsQLHNB9SWMXqeZgz3jmC88KNnrV5AGyXO4Lz0hrbDy==
MIME-Version: 1.0
To: webmaster at datafarm.com, tsms at datafarm.com
Subject: who said its only for the rich?
Content-Type: multipart/related;
boundary="------------AttPart_35158020==.OLA"

This is a multi-part message in MIME format.
--------------AttPart_35158020==.OLA
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title>Invoice 847</title>
</head>
<body bgcolor="#ffffff" text="#000000">
<a href="http://Nzk0N2I3ZTE3NTY5N2Y4ZWUyZjU5ZTJh.niceandshinny.com"><img
alt=""
src="cid:
9.0.0.77.0.53012527946395.24718373 at whitehearted.northernloghomes.net.4"
border="0"></a><br>
<br>
Hold a picture of yourself long serpentine steadily enough in your mind's
eye, systimer you will be drawn toward longyearchix.<BR>ola or else
gradersguided ! or maybe 6 ? <br>
,,,,,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.merlins.org/archives/sa-exim/attachments/20051112/cae0773d/attachment-0001.html