Spam is leaving my server - Can't tell how it is authenticating.

Discussion in 'Server Operation' started by fbarcenas, Mar 23, 2019.

  1. fbarcenas

    fbarcenas Member

    Code:
    regular_text: Received: from mail.duore.icu (unknown [185.244.24.188])
    regular_text:   by mx3.domain.com (Postfix) with ESMTP id F1B56DF1
    regular_text:   for <[email protected]>; Sat, 23 Mar 2019 09:31:39 -0600 (CST)
    regular_text: DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=duore.icu;
    regular_text:  h=Date:From:To:Subject:MIME-Version:Content-Type:List-Unsubscribe:Message-ID; [email protected];
    regular_text:  bh=Veu6CEu+rmaRt3nvQBz+XPB+R38=;
    regular_text:  b=iL+uUcn5FibetfAHmjVbivNRYZ6T1fH6b6BNMBvnfjPxLWryCfnRxnx2du4N1cl+3UcmrPILBI/8
    regular_text:    lCgh39iv07ZvFkGiyw2CEqYw+Fht9/9IxkODMlXT/MMz2CNuLV/KCZDlPXElLRPTedNHM/+SVSTe
    regular_text:    6OcCt+bOjLMLq1cgNVk=
    regular_text: DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=duore.icu;
    regular_text:  b=rslgWyoF9FeKIPziU/qcY3DX5X/E5cV5x/r7XAgxUsD9heVLglfLijjSE7MwE7sireQh8Cq9M6lS
    regular_text:    NK8YMP4VuFB/P/RmeXR1nC6elJpB+dC/xr1al0RLr0KRW5PzyAwMly5hkdXe9idKXnEEP08tmAKr
    regular_text:    Xhu1tbMonY7yU/Vn1GM=;
    regular_text: Received: by mail.duore.icu id hip8lo0001ge for <[email protected]>; Sat, 23 Mar 2019 11:25:15 -0400 (envelope-from <[email protected]>)
    regular_text: Date: Sat, 23 Mar 2019 11:25:15 -0400
    regular_text: From: LifeInsurance.net <[email protected]>
    regular_text: To:   <[email protected]>
    regular_text: Subject: $1,000,000 Life Insurance Plans you can Afford
    regular_text: MIME-Version: 1.0
    regular_text: Content-Type: multipart/alternative;
    regular_text:   boundary="----=_Part_856_165377193.1553354702507"
    regular_text: List-Unsubscribe: <http://www.duore.icu/ad95F2Z395Pm8P913h11rBzvs2920X18Os4xHssvwfg5sIEGsi8JRInnmQd6t1Zix05CTcOY/noninterleaved-requires>
    regular_text: Message-ID: <[email protected]>
    Here is a sample of the header. Where should I begin to look?
     

Share This Page