Spam in Trouble Tickets...

[robin]

Hi,

I'm assuming I've left something open or set up somthing wrong, but I keep getting spam trouble tickets (I've only had the reseller account a few days. I have no accounts that aren't my own, and I have all the plans turned off so I'm not sure what is up. Any ideas? I'm prettty sure I'm not sending it to myself, at least not while I'm awake.

Thanks,
Robin

[admin]

Make sure you don't have your support email set as a catch all that could do it.

[robin]

Thanks, it must be that kind of thing. I've looked closer and its bulk mail that was meant to be delivered to my mailbox that still is on a different server. I had already set up the dnsZone for it on the reseller account but hadn't transfered the domain yet. I guess it must have been catching some that passed through the servers at some point and putting them there... Anyway I deleted that zone for now and it seems to have mostly stopped, so all is well.

Thanks for your help (and all the other help of yours I've been digesting in this forum - a goldmine!),

Robin

[admin]

Yea there is a lot of great people here and a lot of them willing to help others.. It just seems to help every one out..

[robin]

Indeed, everyone seems not only very knowledgeable, but very generous with what they know. It is a very nice thing .

I have been following this a bit more, it seems this 'thing' is also trying to send mail as well..? It isn't really a problem for me as nothing is live yet, but the last thing I want is to be resposible for more spam in the world... Would it be possible that I left something open security wise with the system? Here is a copy of a seemingly bounced message that ended up as a trouble ticket somehow (sent from my support address):

E-Mail MAILER-DAEMON@mail.hsphere.cc
No Info
User name:
Q: Hi. This is the qmail-send program at mail.hsphere.cc.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<Angie4286311@yahoo.com>:
64.157.4.84 failed after I sent the message.
Remote host said: 554 delivery error: dd This user doesn't have a yahoo.com account (angie4286311@yahoo.com) - mta615.mail.yahoo.com

--- Below this line is a copy of the message.
<snipped ....porn etc.... >



These are in the swfhosting.com account and started shortly after the domain was registered if that is of any help...

Cheers,
Robin

[robin]

Whoops, I guess I snipped too soon there, this was the email header:

Return-Path: <support@debreuil.com>
Received: (qmail 28318 invoked by uid 399); 30 Nov 2002 14:26:13 -0000
Received: from unknown (HELO cp.hsphere.cc) (65.57.231.120)
by mail.hsphere.cc with SMTP; 30 Nov 2002 14:26:13 -0000
Message-ID: <487369.1038666543169.JavaMail.cpanel@cp.hsphere.c c>
Date: Sat, 30 Nov 2002 09:29:03 -0500 (EST)
From: support@debreuil.com
To: Bob <Angie4286311@yahoo.com>
Subject: Confirmation: SPAM: MIME-Version: 1.0 #23257
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: H-Sphere

======== CUT HERE =========
This is a receipt that your ticket was successfully received:

Created: Nov 30, 2002 9:29:02 AM
Last Mod: Nov 30, 2002 9:29:03 AM

[Nov 30, 2002 9:29:03 AM]




and then <snip> the message....

[robin]

I'm guessing having the support mail account on a different server is causing the problems, so I've just disabled it all. I'll try again once all those accounts are transfered over to here, probably I'm just jumping the gun with it...

...more reading, yup like you originally said, that pop3 account was a catch all on the other server. I didn't realize it got the tickets directly from the email but obviously that makes sense, how else would they be sent.

Sorry for all my blathering here .

Thanks again,
Robin