Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #256541

Re: Strange locally-originating spam messages from sport.qc.ca

Show all headers | View raw

On 30/3/23 16:30, Julian Gilbey wrote:
> I'm getting a significant number of spam messages being sent to my MTA
> (exim) for the address FRPJXbKeKuek at sport.qc.ca, and now I'm
> starting to see some sent to www-data at aether.toine.be.  What is
> disturbing is that the machine is on a local network, and my
> internet-facing router does not forward anything to this machine.  So
> I presume that these mails are originating from the machine itself.

The first problem I see is you have just published the internal DNS name 
of a machine in your local network.

bots will at this moment be scouring this mailing list and recording the 
internal dns name.

More intelligent bots will be able to pair your email address and server 
and the internal dns name and make a guess your internal server has a 
user www-data that can receive emails.

Hence you get emails to your public email server addressed to your 
internal server.

in 99.99% of the cases that won't be a problem. But in a small number of 
cases it will be.

-- 
Jeremy
(Lists)

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Strange locally-originating spam messages from sport.qc.ca Julian Gilbey <julian@d-and-j.net> - 2023-03-30 11:00 +0200
  Re: Strange locally-originating spam messages from sport.qc.ca Jeremy Ardley <jeremy@ardley.org> - 2023-03-30 11:10 +0200
    Re: Strange locally-originating spam messages from sport.qc.ca Julian Gilbey <julian@d-and-j.net> - 2023-03-30 13:30 +0200
  Re: Strange locally-originating spam messages from sport.qc.ca Reco <recoverym4n@enotuniq.net> - 2023-03-30 11:20 +0200
    Re: Strange locally-originating spam messages from sport.qc.ca Greg Wooledge <greg@wooledge.org> - 2023-03-30 13:20 +0200
      Re: Strange locally-originating spam messages from sport.qc.ca Julian Gilbey <julian@d-and-j.net> - 2023-03-31 10:40 +0200
    Re: Strange locally-originating spam messages from sport.qc.ca Julian Gilbey <julian@d-and-j.net> - 2023-03-30 13:20 +0200
      Re: Strange locally-originating spam messages from sport.qc.ca Reco <recoverym4n@enotuniq.net> - 2023-03-30 14:00 +0200
        Re: Strange locally-originating spam messages from sport.qc.ca Julian Gilbey <julian@d-and-j.net> - 2023-03-31 10:40 +0200

csiph-web