Sender Header

upsforum

• April 30, 2015 15:09

Hi Michael, I enabled Rewrite From, in my exim_mainlog I have many messages like this: 2015-04-30 21:48:01 1Ynskq-0005aU-9c From: header (rewritten was: [fakeuser@fakedomain.it[/EMAIL]], actual sender does not match) original=[fakeuser@fakedomain.it[/EMAIL]] actual_sender=@localdomain.it[/EMAIL]] every message use differents fakeuser and fakedomain but email@localdomain.it[/EMAIL] (this account is a regular email account on the server) it is always the same how can I do to stop them? thank you

• 

  upsforum

  • April 30, 2015 20:26

  I can not understand this message: 2015-04-30 19:52:11 1Ynsd9-0000pl-Iz SMTP connection identification H=localhost A=::1 P=55855 M=1Ynsd9-0000pl-Iz U=root ID=0 S=root B=authenticated_local_user

  0
• 

  cPanelMichael

  • May 01, 2015 05:28

  Hello,

  -04-30 21:48:01 1Ynskq-0005aU-9c From: header (rewritten was: [fakeuser@fakedomain.it[/EMAIL]], actual sender does not match) original=[fakeuser@fakedomain.it[/EMAIL]] actual_sender=@localdomain.it[/EMAIL]] every message use differents fakeuser and fakedomain but email@localdomain.it[/EMAIL] (this account is a regular email account on the server) it is always the same how can I do to stop them?

  
  You should change the password (and contact the client) of the real email account because the log indicates that users are authenticating with that email user and using it to send email from fake addresses. I can not understand this message: 2015-04-30 19:52:11 1Ynsd9-0000pl-Iz SMTP connection identification H=localhost A=::1 P=55855 M=1Ynsd9-0000pl-Iz U=root ID=0 S=root B=authenticated_local_user
  This thread should help:

  0

Please sign in to leave a comment.