what am I dealing with here?
admin at lctn.org
admin at lctn.org
Tue Apr 1 13:45:11 IST 2008
>If you still want it then make sure you do not give them any credit by
>giving negative spam points for having a valid DKIM header for example.
>This is a config problem on your host. It should not list a loopback
>address with your hostname attached to it.
Thanks much for the comments. I was messing with the host settings a few days ago, and didn't realize I had left the loopback address in place. Fixed that now.
As far as blocking Yahoo, that is not a viable solution, since I cannot dictate who can send mail to the 20 school districts I manage. I had lost the doc that was sent to me from the school that has noticed the issue. I retrieved it last night, and was looking over the header info. Two that I looked at had bogus to, and from info, so I am not sure how it even ended up at the school. That was the info I meant to send with my first post. It almost seemed like the sender was bouncing off of my server, but I don't see any indication the server has been compromised. I included one header below.
Received: from relay-4.lctn.org [184.108.40.206] by kms.k12.mn.us with ESMTP
(SMTPD-9.22) id AECD01E4; Sat, 29 Mar 2008 06:58:05 -0500
Received: from n78.bullet.mail.sp1.yahoo.com (n78.bullet.mail.sp1.yahoo.com [220.127.116.11])
by relay-4.lctn.org (Postfix) with SMTP id D27BB3800C8
for <khippen at kms.k12.mn.us>; Sat, 29 Mar 2008 06:58:00 -0500 (CDT), Found to be clean
Received: from [18.104.22.168] by n78.bullet.mail.sp1.yahoo.com with NNFMP; 29 Mar 2008 11:57:44 -0000
Received: from [22.214.171.124] by t2.bullet.sp1.yahoo.com with NNFMP; 29 Mar 2008 11:57:44 -0000
Received: from [127.0.0.1] by omp502.mail.sp1.yahoo.com with NNFMP; 29 Mar 2008 11:57:44 -0000
X-Yahoo-Newman-Id: 223248.63370.bm at omp502.mail.sp1.yahoo.com
Received: (qmail 73645 invoked by uid 60001); 29 Mar 2008 11:57:44 -0000
Received: from [126.96.36.199] by web45109.mail.sp1.yahoo.com via HTTP; Sat, 29 Mar 2008 04:57:43 PDT
Date: Sat, 29 Mar 2008 04:57:43 -0700 (PDT)
From: elke vanzanten <elkevanzanten3561 at yahoo.com>
To: kelekia at interpac.net
Content-Type: multipart/alternative; boundary="0-1049636514-1206791863=:70178"
Message-ID: <8831.70178.qm at web45109.mail.sp1.yahoo.com>
X-RCPT-TO: <khippen at kms.k12.mn.us>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the MailScanner