unknown account in my mail server weird???

slack66 · 11-19-2003, 12:04 AM

hello people

this afternoon went i read my maillog in my mail server one of my user received an email coming from ex. "james@xxx.com" and in my knowlege there no one name... james in my mail account... i try to finger command in my linux box but there no one name james????in my account?? weird

what maybe the possible reason an outsider can email my local user and masquerade as a local user "james@xxx.com" my domin ex is "xxx.com"
can you try to help me people........... thk!!!

Bluesuperman · 11-19-2003, 12:40 AM

What from field are you referring to ? Header from or ? From fields are easily be facted - does your maillog show the IP of the machine that sent the message ?

Michael.

slack66 · 11-19-2003, 03:31 AM

header from. nope only the ip address of the relay server of my isp.

CEdstrom · 11-19-2003, 09:31 AM

Sounds like header manipulation. They forge the information to look like what you see. Can you post the header information and maybe we can see more details?

slack66 · 11-19-2003, 11:00 PM

oops.... i erase it

but if i see it again i will try to post it

for now i try to monitor my maillog and it doesnt appear anymore in my maillog.