Forum Moderators: phranque

Message Too Old, No Replies

spam from local host 127.0.0.1

do I need to be worried about this

         

nancyb

10:33 pm on Sep 4, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I have gotten over 400+ spam today!

I use mailwasher and almost all of the spam is being statused for delete by one or more filters I've set up.

Because there have been so many today I decided to look at the headers again just to see if there was anything in common.

Egads, they start:

Received: from localhost [127.0.0.1] by mydomain.com
with SpamAssassin (2.52 1.174.2.8-2003-03-24-exp);
Thu, 04 Sep 2003 15:12:50 -0600

127.0.0.1 is my local computyer, right? I'm on XP Pro.
I just ran two full virus scans on the 30th (Norton and HouseCall), Norton is up to date.

I looked around WebmasterWorld and Google and got lost - mentally. Does this mean that someone somewhere has a mailto: with my domain and [127.0.0.1]?

Do I need to be worried about this? I don't think I can take another catastrohpy this week.

Thanks

Jingle

6:36 am on Sep 5, 2003 (gmt 0)

10+ Year Member



Localhost, in this case, is your mail server.

If the header is correct (spammer forges header, these days), some software on your mail server is sending mail to itself.

nancyb

6:56 am on Sep 5, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



thanks Jingle.

No, there were too many, all different, to be forged.

I installed SpamAssassin earlier in the day, so I think that had something to do with it because as soon as I uninstalled SpamAssassin it all stopped.

Very strange, especially since I left a few of them on the server so I could download them to show my hosting service - and - none of them arrived in my inbox.