Site sends spam to email?

[Haikarainen]

I got this message sent to me, is this site sending out spam?

Code: [Select]

Delivered-To: *@gmail.com
Received: by 10.64.166.103 with SMTP id zf7csp21218ieb;
        Mon, 23 Apr 2012 03:57:22 -0700 (PDT)
Received: by 10.216.132.216 with SMTP id o66mr9780502wei.14.1335178642287;
        Mon, 23 Apr 2012 03:57:22 -0700 (PDT)
Return-Path: <bounce-id=D114=U56003.90plan.ovh.net=1335178643347317541@81.mail-out.ovh.net>
Received: from 81.mail-out.ovh.net (81.mail-out.ovh.net. [87.98.182.117])
        by mx.google.com with SMTP id e9si8273891wiw.42.2012.04.23.03.57.21;
        Mon, 23 Apr 2012 03:57:22 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of bounce-id=D114=U56003.90plan.ovh.net=1335178643347317541@81.mail-out.ovh.net designates 87.98.182.117 as permitted sender) client-ip=87.98.182.117;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of bounce-id=D114=U56003.90plan.ovh.net=1335178643347317541@81.mail-out.ovh.net designates 87.98.182.117 as permitted sender) smtp.mail=bounce-id=D114=U56003.90plan.ovh.net=1335178643347317541@81.mail-out.ovh.net
Received: (qmail 31867 invoked by uid 0); 23 Apr 2012 10:57:25 -0000
Received: from gw0.ovh.net (HELO 90plan.ovh.net) (213.251.189.200)
  by 81.mail-out.ovh.net with SMTP; 23 Apr 2012 10:57:23 -0000
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
by localhost.domain.tld (Postfix) with ESMTP id 3D79E3F45B
for <fredrik.haikarainen@gmail.com>; Mon, 23 Apr 2012 12:57:19 +0200 (CEST)
Received: by 90plan.ovh.net (Postfix, from userid 56003)
id 132583F45D; Mon, 23 Apr 2012 12:57:19 +0200 (CEST)
To: *@gmail.com
Subject: KnRAsshiveYb
From: "bsgtzk@dmekas.com" <laurent@sfml-dev.org>
Reply-To: <bsgtzk@dmekas.com>
Date: Mon, 23 Apr 2012 10:57:18 -0000
X-Mailer: SMF
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="SMF-0a817b5c5eec048750e5bde766b1f484"
Content-Transfer-Encoding: 7bit
Message-Id: <20120423105719.132583F45D@90plan.ovh.net>
X-Ovh-Tracer-Id: 3860429307667617224

SAeAa2  <a href="http://sbxbvfgfydna.com/">sbxbvfgfydna</a>, [url=http://bxaitakczfqd.com/]bxaitakczfqd[/url], [link=http://sdamqfjbhjbp.com/]sdamqfjbhjbp[/link], http://aawudhivznkj.com/
--SMF-0a817b5c5eec048750e5bde766b1f484
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

SAeAa2  <a href="http://sbxbvfgfydna.com/">sbxbvfgfydna</a>, [url=http://bxaitakczfqd.com/]bxaitakczfqd[/url], [link=http://sdamqfjbhjbp.com/]sdamqfjbhjbp[/link], http://aawudhivznkj.com/
--SMF-0a817b5c5eec048750e5bde766b1f484--

[OniLinkPlus]

You know that error message has your email and your IP address in it, right? And that this forum has spam bots lurking everywhere?

[eXpl0it3r]

It seems someone used the SMTP from ovh.net and since sfml-dev.org is hosted at ovh.net I guess it's the SMTP of sfml-dev.org or if the 'mail hosting package' is shared there could be a vurnability on the ovh.net site.
I guess Laurent needs to look into this and maybe report it to ovh.net...

[Laurent]

In fact I have no idea what to do. It's a shared hosting so there's nothing I can do, except reporting this problem.

[Groogy]

Sending an email with "another email" is not hard. The sender email is written in the package so that field only has to be changed. Don't think there's much that can be done.

[eXpl0it3r]

Sending an email with "another email" is not hard. The sender email is written in the package so that field only has to be changed. Don't think there's much that can be done.

Sure it's not hard, but mail servers aren't that stupid nowadays. Many do block all mails when the sender email domain does not resolve to the sender IP.
But as you can see it came from the same host so it's a bit suspicious but those nasty hackers often find a way into mail servers. We had one too last year and got blacklisted on several mail servers, not so good for the buissness...
ovh.net has certaintly an abuse section somewhere.

[Haikarainen]

You know that error message has your email and your IP address in it, right? And that this forum has spam bots lurking everywhere?

Thanks for the headsup, wasnt really thinking clearly yesterday hehe.