Re: Hijacked domain

From: Urb LeJeune <urb_at_e-government.com>
Date: Tue 25 Oct 2005 09:55:50 -0500

>Does anyone know how to stop this and how to make sure the domain is not
>blacklisted?

         There are two consideration. The first is that someone has hacked your
system and is sending spam through your mailserver. The second is that
someone is sending spam using your domain name in the From: field.

         The second is of no concern because the professional Black List
companies look at the mailserver IP address and not the contents of the
From: field.

         The first is very serious and will result in you being
blacklisted. If
your mail program supports it look at all of your headers from a message
that used your domain in the From: field. It should start with something
like the following.

Received from how.longtontygroup.com [66.201.124.152] by e-government.com

         If you're domain name and mailserver IP address appears as the
sending domain and IP address you have a serious problem since you
either have an open mail relay or your system has been hacked.

         Send me a private message and I'll tell you if you are currently
blacklisted by any of the popular blacklisting companies.

Urb urb_at_e-government.com






Received on Tue Oct 25 2005 - 09:55:50 CDT