<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1276" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi everyone,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>We have in recent days been the recipient of
spammers using our domain name as a return address. They use all kinds of
names etc..</FONT></DIV>
<DIV><FONT face=Arial size=2>I could really use some assistance in trying
to stop this or at least handle the bounce mail better, we are also getting a
extreme amount</FONT></DIV>
<DIV><FONT face=Arial size=2>of mail from null senders </FONT><FONT face=Arial
size=2>logs are filled with from=<> on one of our server we have 20,000
entries in the last 15 hours.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Any hints, comments, ideas on stopping this I just
added dnsbl.sorbs.net to sendmail and it's already starting to help (BTW
great job Matthew)</FONT></DIV>
<DIV><FONT face=Arial size=2>are others having this problem also? it
seems this started up a couple of days ago after MyDoom hit. Is anyone else
having this happen or has </FONT></DIV>
<DIV><FONT face=Arial size=2>seen this before.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>below is an example of the a org message that
was returned I left off the information from where it was bounced. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks in advance</FONT></DIV>
<DIV><FONT face=Arial size=2>Steve</FONT></DIV>
<DIV><FONT face=Arial size=2>--- Start </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Content-Type: message/rfc822</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Message-ID: <<A
href="mailto:QVMEELMZZSXALGDVYHSPYZ@fidalgo.net">QVMEELMZZSXALGDVYHSPYZ@fidalgo.net</A>><BR>From:
Roseanna Escalante <<A
href="mailto:webmaster@inteliport.com">webmaster@inteliport.com</A>><BR>To:
<A
href="mailto:webmaster@northernbus.com">webmaster@northernbus.com</A><BR>Subject:
FWD: Available All. <A href="mailto:X@nax">X@nax</A> , v|agR@ _ \ Va:l:ium
= S0ma , Pn:t:er<BR> min 4v5tR<BR>Date: Wed, 4 Feb 2004 02:23:41 -0500
<BR>MIME-Version: 1.0<BR>X-Mailer: Internet Mail Service
(5.5.2656.59)<BR>X-MS-Embedded-Report: <BR>Content-Type:
text/plain;<BR> charset="iso-8859-1"</FONT></DIV>
<DIV><FONT face=Arial size=2><BR>We believe ordering medication should be as
simple as ordering anything else<BR>on the Internet: Private, secure, and easy.
</DIV>
<DIV>On stock: \ Xan|a|x ) Val/i/um = So+m+a = Pntermin $ V1Agr@ </DIV>
<DIV>Plus: A'cyc|0vir, <A href="mailto:Pr0z@.c">Pr0z@.c</A>, <A
href="mailto:P@`xil">P@`xil</A>, Bus:p@r, Ad|p&.x, I0`nam|n,
M3ri:dia,<BR>X3nic.a|, Am`bi3n, S0na.Ta, F`l3xeril, Ce|3br'ex, Fi0ri`c3t, <A
href="mailto:T'ram@do">T'ram@do</A>|,<BR><A href="mailto:U|t`r@m">U|t`r@m</A>,
L3:v|tra, Pr0p3ci`a </DIV>
<DIV> </DIV>
<DIV>Most trusted name brands. </DIV>
<DIV>Enjoy deep discount meds here <<A
href="http://www.affordablemeds.biz">http://www.affordablemeds.biz</A>>
</DIV>
<DIV>------_=_NextPart_000_01C3EA29.1039B262--</DIV>
<DIV> </DIV>
<DIV>---End</FONT></DIV></BODY></HTML>