✔ Webserver als SPAM-Versender?

[Dj Mike]

Hallo,
ich habe das ungute Gefühl, dass mein Account bei dem Sharedhosting Anbieter Rootbash dazu misbraucht wird, Spam Emails zu versenden. Ich erhalte in letzter Zeit immer wieder Spam Mails und gleichzeitig eine Mail vom Mail Delivery Subsystem:

Spammail:

From - Fri Oct 06 20:32:40 2006
X-Account-Key: account15
X-UIDL: 448884f70000005a
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <321stocknews@trellisgroup.com>
Received: from ci676568-B.hsd1.tn.comcast.net. (c-68-52-100-77.hsd1.tn.comcast.net [68.52.100.77])
    by orion.rootbash.de (8.12.11.20060308/8.12.11) with ESMTP id k96DgWJG028311
    for <info@pccare-aachen.de>; Fri, 6 Oct 2006 15:42:35 +0200
Received: from 217.160.230.13 (HELO mx01.1and1.com)
     by pccare-aachen.de with esmtp (2BY5A7X5 LEPW)
     id S7C34L-QIFTL1-N2
     for info@pccare-aachen.de; Fri, 6 Nov 2006 13:42:38 +0360
Date:     Fri, 6 Nov 2006 13:42:38 +0360
From: "Maricela Shoemaker" <321stocknews@trellisgroup.com>
X-Mailer: The Bat! (v2.00.5) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <555900654.66794056144048@thebat.net>
To: info@pccare-aachen.de
Subject: shocked diplomats and 6
MIME-Version: 1.0
Content-Type: text/plain;
  charset=windows-1250
Content-Transfer-Encoding: 8bit
X-Spam: Not detected
Status:   

THIS FRIDAY OCTOBER 6 2006 BREAKING NEWS RELEASED ON CR SVF
DON'T MISS THIS INVESTMENT OPPORTUNITY, PLACE |CRSVF|  ON THE RAD`AR

Mail vom Mail Delivery Subsystem:

From - Fri Oct 06 20:32:41 2006
X-Account-Key: account15
X-UIDL: 448884f70000005b
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
Return-Path: <MAILER-DAEMON@orion.rootbash.de>
Received: from localhost (localhost)
    by orion.rootbash.de (8.12.11.20060308/8.12.11) id k96DgcSf028339;
    Fri, 6 Oct 2006 15:42:38 +0200
Date: Fri, 6 Oct 2006 15:42:38 +0200
From: Mail Delivery Subsystem <MAILER-DAEMON@orion.rootbash.de>
Message-Id: <200610061342.k96DgcSf028339@orion.rootbash.de>
To: <info@pccare-aachen.de>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
    boundary="k96DgcSf028339.1160142158/orion.rootbash.de"
Content-Transfer-Encoding: 8bit
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
Status:   

This is a MIME-encapsulated message

--k96DgcSf028339.1160142158/orion.rootbash.de

The original message was received at Fri, 6 Oct 2006 15:42:36 +0200
from localhost [127.0.0.1]

   ----- The following addresses had permanent fatal errors -----
<321stocknews@trellisgroup.com>
    (reason: 550 <321stocknews@trellisgroup.com>: invalid address)

   ----- Transcript of session follows -----
... while talking to mx00.1and1.com.:
>>> DATA
<<< 550 <321stocknews@trellisgroup.com>: invalid address
550 5.1.1 <321stocknews@trellisgroup.com>... User unknown
<<< 554 no valid recipients

--k96DgcSf028339.1160142158/orion.rootbash.de
Content-Type: message/delivery-status

Reporting-MTA: dns; orion.rootbash.de
Received-From-MTA: DNS; localhost
Arrival-Date: Fri, 6 Oct 2006 15:42:36 +0200

Final-Recipient: RFC822; 321stocknews@trellisgroup.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; mx00.1and1.com
Diagnostic-Code: SMTP; 550 <321stocknews@trellisgroup.com>: invalid address
Last-Attempt-Date: Fri, 6 Oct 2006 15:42:38 +0200

--k96DgcSf028339.1160142158/orion.rootbash.de
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 8bit

Return-Path: <info@pccare-aachen.de>
Received: from orion.rootbash.de (localhost [127.0.0.1])
    by orion.rootbash.de (8.12.11.20060308/8.12.11) with ESMTP id k96DgaSf028337
    for <321stocknews@trellisgroup.com>; Fri, 6 Oct 2006 15:42:36 +0200
Received: (from mail@localhost)
    by orion.rootbash.de (8.12.11.20060308/8.12.11/Submit) id k96Dga9G028333;
    Fri, 6 Oct 2006 15:42:36 +0200
Date: Fri, 6 Oct 2006 15:42:36 +0200
X-Authentication-Warning: orion.rootbash.de: mail set sender to info@pccare-aachen.de using -f
From: "PCCare" <info@pccare-aachen.de>
To: "Maricela Shoemaker" <321stocknews@trellisgroup.com>
Subject: Re: shocked diplomats and 6
X-Mailer: Confixx Autoresponder
Precedence: junk
Message-ID: <555900654.66794056144048@thebat.net>

--k96DgcSf028339.1160142158/orion.rootbash.de--

Mein Account liegt auf dem Server orion.rootbash.de, meine Domain heißt pccare-aachen.de.
Ist mein verdacht begründet?
Vielen Dank,
Micha

 

[Sinac]

Könntest du trotzdem aufhören zu pushen?
Es gibt im Internet Seiten die deinen Mailserver testen. Da kannst du sehen ob dein Server als Relay mitbraucht werden kann.


[edit by mod] Der Threadpusher wurde hier wieder entfernt und der User per PN darauf hingewiesen, dies zukünftig zu unterlassen.

 

[Dj Mike]

Hallo,

Danke für die Hilfe. Ich habe meinen Account mit folgender Seite getestet:http://www.spamhelp.org/shopenrelay/
Offensichtlich lässt sich mein Account nicht als Relay missbrauchen. Trotzdem wundert es mich, dass ich die E-Mail vom Mail Delivery Subsystem bekomme, obwohl ich ja selber keine E-Mail versendet habe.

Micha

PS. Tut mir leid wegen dem Pushen, war nicht meine Absicht!