Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

SpamCop FAQ : Help for abuse-desks and administrators : Im receiving spam reports, but my mail server logs don reflect it. Why?

April 26, 2017abuse-desks administrators help logs reports spam SpamCop

0

Posted

SpamCop FAQ : Help for abuse-desks and administrators : Im receiving spam reports, but my mail server logs don reflect it. Why?

1 Answer

0

Posted

Perhaps the headers of the spam look something like this: From wdwarren Sat Mar 04 07:07:05 2000 Received: from [10.1.1.1] by hotmail.com (3.2) with ESMTP id MHotMailBA8A709500C6D820F3D8D8475492505611; Sat Mar 04 07:06:28 2000 Message-ID: <539045@ 169770> From: wdwarren Subject: UNIVERSITY DIPLOMAS (Verifiable) Date: Sat, 04 Mar 2000 09:45:21 -0400 (EDT) MIME-Version: 1.0 Content-Type: TEXT/HTML; charset=”US-ASCII” Content-Transfer-Encoding: 7bit Where [10.1.1.1] is your server. Note that there are no “received” lines added by your server – or if there are additional received lines, they may look forged or otherwise inconsistant with lines added normally by your mailserver. This situation is quite common. You may have a user running a dedicated spam sending program (ratware) to send directly from your server. These programs do not use any mailserver facilities on your server – specifically to avoid detection. They are usually named something innocuous like “mailform.pl” or “