• Help me get rid of this spam blowback

    From Knute Johnson@groups@585ranch.com to comp.mail.sendmail on Thu Sep 10 16:17:16 2026
    From Newsgroup: comp.mail.sendmail

    I am getting these emails in my mailbox I think because I am the
    MAILER-DAEMON alias. The mail doesn't get sent because in this case the
    host is unknown. What I don't know is who sent this and how did it get
    into the mail server? There are hundreds of emails in the log to this
    domain. There are multiple users on this server and I'm not sure how to
    tell who sent the email. I want to put a stop to it but not sure what
    to do here. Any help would be appreciated. More below the email -->

    ------------------------------------------------------------------------------- The original message was received at Sat, 5 Sep 2026 06:20:45 GMT
    from localhost
    with id 6856KjcO2840606

    ----- The following addresses had permanent fatal errors ----- <treasurerff@44pf.com>

    ----- Transcript of session follows -----
    550 5.1.2 <treasurerff@44pf.com>... Host unknown (Name server:
    mail.44pf.com.: host not found)


    Reporting-MTA: dns; n6ov.org
    Arrival-Date: Sat, 5 Sep 2026 06:20:45 GMT

    Final-Recipient: RFC822; treasurerff@44pf.com
    X-Actual-Recipient: rfc822; treasurerff@44pf.com
    Action: failed
    Status: 5.1.2
    Remote-MTA: DNS; mail.44pf.com
    Last-Attempt-Date: Thu, 10 Sep 2026 02:13:41 GMT


    Return-Path: <MAILER-DAEMON>
    Received: from localhost (localhost)
    by n6ov.org (8.18.1/8.18.1/Debian-6) id 6856KjcO2840606;
    Sat, 5 Sep 2026 06:20:45 GMT
    Date: Sat, 5 Sep 2026 06:20:45 GMT
    From: Mail Delivery Subsystem <MAILER-DAEMON>
    Message-Id: <202609050620.6856KjcO2840606@n6ov.org>
    To: <treasurerff@44pf.com>
    MIME-Version: 1.0
    Content-Type: multipart/report; report-type=delivery-status;
    boundary="6856KjcO2840606.1788589245/n6ov.org"
    Subject: Returned mail: see transcript for details
    Auto-Submitted: auto-generated (failure) ------------------------------------------------------------------------------

    Here is a sample chunk of my log.

    6868EAqV2944528: to=<TeslaCompany@welcome.com>, delay=2+06:19:32, xdelay=00:02:16, mailer=esmtp, pri=29370000, relay=welcome.com.
    [3.33.139.32], dsn=4.4.1, stat=Deferred: Connection timed out with welcome.com.
    685C5fhS2863542: to=<presidentogxryoix@44pf.com>, delay=3+02:28:01, xdelay=00:00:00, mailer=esmtp, pri=40260000, relay=mail.44pf.com. [199.244.51.121], dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    685AqMGo2858702: to=<vphcbaox@44pf.com>, delay=3+03:41:20,
    xdelay=00:00:00, mailer=esmtp, pri=40890000, relay=mail.44pf.com.,
    dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    6856KjcO2840606: to=<treasurerff@44pf.com>, delay=3+08:12:57, xdelay=00:00:00, mailer=esmtp, pri=43320000, relay=mail.44pf.com.,
    dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    6882j5IB3114461: to=<service.funds@secure.net>, delay=11:56:22, xdelay=00:02:15, mailer=esmtp, pri=6510000, relay=mail.secure.net. [161.58.2.116], dsn=4.4.1, stat=Deferred: Connection timed out with mail.secure.net.
    6868EAqV2944528: to=<TeslaCompany@welcome.com>, delay=2+06:29:32, xdelay=00:02:15, mailer=esmtp, pri=29460000, relay=welcome.com.
    [3.33.139.32], dsn=4.4.1, stat=Deferred: Connection timed out with welcome.com.
    685C5fhS2863542: to=<presidentogxryoix@44pf.com>, delay=3+02:38:01, xdelay=00:00:00, mailer=esmtp, pri=40350000, relay=mail.44pf.com. [199.244.51.121], dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    685AqMGo2858702: to=<vphcbaox@44pf.com>, delay=3+03:51:20,
    xdelay=00:00:00, mailer=esmtp, pri=40980000, relay=mail.44pf.com.,
    dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    6856KjcO2840606: to=<treasurerff@44pf.com>, delay=3+08:22:57, xdelay=00:00:00, mailer=esmtp, pri=43410000, relay=mail.44pf.com.,
    dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    6882j5IB3114461: to=<service.funds@secure.net>, delay=12:06:22, xdelay=00:02:15, mailer=esmtp, pri=6600000, relay=mail.secure.net. [161.58.2.116], dsn=4.4.1, stat=Deferred: Connection timed out with mail.secure.net.
    6868EAqV2944528: to=<TeslaCompany@welcome.com>, delay=2+06:39:32, xdelay=00:02:15, mailer=esmtp, pri=29550000, relay=welcome.com.
    [3.33.139.32], dsn=4.4.1, stat=Deferred: Connection timed out with welcome.com.
    685C5fhS2863542: to=<presidentogxryoix@44pf.com>, delay=3+02:48:01, xdelay=00:00:00, mailer=esmtp, pri=40440000, relay=mail.44pf.com. [199.244.51.121], dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    685AqMGo2858702: to=<vphcbaox@44pf.com>, delay=3+04:01:20,
    xdelay=00:00:00, mailer=esmtp, pri=41070000, relay=mail.44pf.com.,
    dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.
    6856KjcO2840606: to=<treasurerff@44pf.com>, delay=3+08:32:57, xdelay=00:00:00, mailer=esmtp, pri=43500000, relay=mail.44pf.com.,
    dsn=4.4.1, stat=Deferred: Connection refused by mail.44pf.com.

    My LogLevel is 9. I just reset it to 12 to maybe see some more information.

    This is the source from the above email:

    X-Mozilla-Status: 0001
    X-Mozilla-Status2: 00000000
    Return-Path: <MAILER-DAEMON>
    Received: from localhost (localhost)
    by n6ov.org (8.18.1/8.18.1/Debian-6) id 68A29DUi3304187;
    Thu, 10 Sep 2026 02:13:41 GMT
    Date: Thu, 10 Sep 2026 02:13:41 GMT
    From: Mail Delivery Subsystem <MAILER-DAEMON>
    Message-Id: <202609100213.68A29DUi3304187@n6ov.org>
    To: postmaster
    MIME-Version: 1.0
    Content-Type: multipart/report; report-type=delivery-status;
    boundary="68A29DUi3304187.1789006421/n6ov.org"
    Subject: Postmaster notify: see transcript for details
    Auto-Submitted: auto-generated (postmaster-notification)

    This is a MIME-encapsulated message

    --68A29DUi3304187.1789006421/n6ov.org

    The original message was received at Sat, 5 Sep 2026 06:20:45 GMT
    from localhost
    with id 6856KjcO2840606

    ----- The following addresses had permanent fatal errors ----- <treasurerff@44pf.com>

    ----- Transcript of session follows -----
    550 5.1.2 <treasurerff@44pf.com>... Host unknown (Name server:
    mail.44pf.com.: host not found)

    --68A29DUi3304187.1789006421/n6ov.org
    Content-Type: message/delivery-status

    Reporting-MTA: dns; n6ov.org
    Arrival-Date: Sat, 5 Sep 2026 06:20:45 GMT

    Final-Recipient: RFC822; treasurerff@44pf.com
    X-Actual-Recipient: rfc822; treasurerff@44pf.com
    Action: failed
    Status: 5.1.2
    Remote-MTA: DNS; mail.44pf.com
    Last-Attempt-Date: Thu, 10 Sep 2026 02:13:41 GMT

    --68A29DUi3304187.1789006421/n6ov.org
    Content-Type: text/rfc822-headers

    Return-Path: <MAILER-DAEMON>
    Received: from localhost (localhost)
    by n6ov.org (8.18.1/8.18.1/Debian-6) id 6856KjcO2840606;
    Sat, 5 Sep 2026 06:20:45 GMT
    Date: Sat, 5 Sep 2026 06:20:45 GMT
    From: Mail Delivery Subsystem <MAILER-DAEMON>
    Message-Id: <202609050620.6856KjcO2840606@n6ov.org>
    To: <treasurerff@44pf.com>
    MIME-Version: 1.0
    Content-Type: multipart/report; report-type=delivery-status;
    boundary="6856KjcO2840606.1788589245/n6ov.org"
    Subject: Returned mail: see transcript for details
    Auto-Submitted: auto-generated (failure)

    --68A29DUi3304187.1789006421/n6ov.org--
    --

    Knute Johnson

    --- Synchronet 3.22a-Linux NewsLink 1.2