[Mailman-Users] Someone trying to use mailman for spamming?

[Vaughn Cleminson]

Hi All

I think someone is trying to get my mailman to spam for them.
My question is, am I right, and did it work?

Thanks
Vaughn

I found the following in my sendmail logs:
Oct 15 17:00:10 IJUNC-OBIWAN sendmail[4097]: f9FJ0Ah04097:
from=<ee-newslist-admin at listserver.icelogic.co.za>, size=1659, class=-60,
nrcpts=1, msgid=<200110151900.f9FJ0Ah04097 at localhost.icelogic.co.za>,
proto=ESMTP, daemon=MTA, relay=IJUNC-OBIWAN [127.0.0.1]
Oct 15 17:00:14 IJUNC-OBIWAN sendmail[4101]: f9FJ0Eh04101:
from=<elektronlist-admin at listserver.icelogic.co.za>, size=1398, class=-60,
nrcpts=1, msgid=<200110151900.f9FJ0Eh04101 at localhost.icelogic.co.za>,
proto=ESMTP, daemon=MTA, relay=IJUNC-OBIWAN [127.0.0.1]
Oct 15 17:00:16 IJUNC-OBIWAN sendmail[4105]: f9FJ0Fh04105:
from=<energizelist-admin at listserver.icelogic.co.za>, size=1376, class=-60,
nrcpts=1, msgid=<200110151900.f9FJ0Fh04105 at localhost.icelogic.co.za>,
proto=ESMTP, daemon=MTA, relay=IJUNC-OBIWAN [127.0.0.1]
Oct 15 17:00:18 IJUNC-OBIWAN sendmail[4098]: f9FJ0Ah04097:
to="|/home/mailman/mail/wrapper mailowner ee-newslist",
ctladdr=<ee-newslist-admin at listserver.icelogic.co.za> (8/0), delay=00:00:08,
xdelay=00:00:08, mailer=prog, pri=138708, dsn=2.0.0, stat=Sent
Oct 15 17:00:18 IJUNC-OBIWAN sendmail[4102]: f9FJ0Eh04101:
to="|/home/mailman/mail/wrapper mailowner elektronlist",
ctladdr=<elektronlist-admin at listserver.icelogic.co.za> (8/0),
delay=00:00:04, xdelay=00:00:04, mailer=prog, pri=138421, dsn=2.0.0,
stat=Sent
Oct 15 17:00:19 IJUNC-OBIWAN sendmail[4106]: f9FJ0Fh04105:
to="|/home/mailman/mail/wrapper mailowner energizelist",
ctladdr=<energizelist-admin at listserver.icelogic.co.za> (8/0),
delay=00:00:04, xdelay=00:00:03, mailer=prog, pri=138421, dsn=2.0.0,
stat=Sent
Oct 15 17:00:33 IJUNC-OBIWAN sendmail[4080]: f9F6ALK25168:
to=<ysfgk at mail.iupi.pt>, delay=12:50:12, xdelay=00:01:02, mailer=esmtp,
pri=1203734, relay=mail.iupi.pt. [195.22.0.198], dsn=4.0.0, stat=Deferred:
Connection timed out with mail.iupi.pt.
Oct 15 17:00:33 IJUNC-OBIWAN sendmail[4080]: f9F6AMK25179:
to=<ysfgk at mail.iupi.pt>, delay=12:50:11, xdelay=00:00:00, mailer=esmtp,
pri=1203734, relay=mail.iupi.pt., dsn=4.0.0, stat=Deferred: Connection timed
out with mail.iupi.pt.
Oct 15 17:00:33 IJUNC-OBIWAN sendmail[4080]: f9F6AMK25173:
to=<ysfgk at mail.iupi.pt>, delay=12:50:11, xdelay=00:00:00, mailer=esmtp,
pri=1203742, relay=mail.iupi.pt., dsn=4.0.0, stat=Deferred: Connection timed
out with mail.iupi.pt.
Oct 15 17:00:33 IJUNC-OBIWAN sendmail[4080]: f9F6AMK25176:
to=<ysfgk at mail.iupi.pt>, delay=12:50:11, xdelay=00:00:00, mailer=esmtp,
pri=1203746, relay=mail.iupi.pt., dsn=4.0.0, stat=Deferred: Connection timed
out with mail.iupi.pt.
Oct 15 17:00:49 IJUNC-OBIWAN sendmail[4080]: f9F1qQK24283:
to=<jykmj at mail.777.net.cn>, delay=17:08:23, xdelay=00:00:15, mailer=esmtp,
pri=1652156, relay=mx2.777.net.cn. [61.157.152.12], dsn=4.0.0,
stat=Deferred: Connection reset by mx2.777.net.cn.
Oct 15 17:00:49 IJUNC-OBIWAN sendmail[4080]: f9F1qQK24286:
to=<jykmj at mail.777.net.cn>, delay=17:08:22, xdelay=00:00:00, mailer=esmtp,
pri=1652156, relay=mx1.777.net.cn., dsn=4.0.0, stat=Deferred: Connection
reset by mx1.777.net.cn.
Oct 15 17:00:49 IJUNC-OBIWAN sendmail[4080]: f9F1qPK24279:
to=<jykmj at mail.777.net.cn>, delay=17:08:24, xdelay=00:00:00, mailer=esmtp,
pri=1652164, relay=mx2.777.net.cn., dsn=4.0.0, stat=Deferred: Connection
reset by mx2.777.net.cn.
Oct 15 17:00:49 IJUNC-OBIWAN sendmail[4080]: f9F1qOK24274:
to=<jykmj at mail.777.net.cn>, delay=17:08:24, xdelay=00:00:00, mailer=esmtp,
pri=1652168, relay=mx1.777.net.cn., dsn=4.0.0, stat=Deferred: Connection
reset by mx1.777.net.cn.----------------------


Vaughn Cleminson
the-i-junction.com
+27 11 726-4922
www.the-i-junction.com