At least once a day, I get a spam message that looks like a returned email in the subject line, but is actually spam. They always come from the mail server at greatbasin.net. I don't think that Greatbasin (a legitimate ISP in Nevada) is sending these messages, but someone must be abusing their mailserver to send them. I've checked their mailserver to see if it is an open relay (using http://www.abuse.net/relay.html
), and it does not appear to be...so how are spammers able to use their server to spam? Is their server mis-configured? I have pasted the email headers below. My email account is not with Greatbasin.net or gbismail.net or any of the domains listed below.
I have tried emailing all of the standard contact names (abuse, admin, support, etc.) @greatbasin.net but have received no reply. Do I need to call them on the phone and bitch them out? What exactly do I need to tell them to fix? Greatbasin is the only ISP that I get these types of fake-returned-mail spams from so I think they're at fault.
From: Mail Delivery Subsystem <MAILER-DAEMON@smtp0.greatbasin.net>
Subject: Returned mail: see transcript for details
To: *my email address*
The original message was received at Thu, 27 Jul 2006 09:43:00 -0700
----- The following addresses had permanent fatal errors -----
(reason: 550-Mailbox unknown. Either there is no mailbox associated with this)
----- Transcript of session follows -----
... while talking to localhost.greatbasin.net.:
<<< 550-Mailbox unknown. Either there is no mailbox associated with this
<<< 550-name or you do not have authorization to see it.
<<< 550 5.1.1 User unknown
554 5.0.0 Service unavailable (Mailbox unknown. Either there is no mailbox associated with this)
Return-Path: <*My email address*>
Received: from mailicopycenter.com ([184.108.40.206])
by smtp0.greatbasin.net (8.12.10/8.12.10) with SMTP id k6RGgwh
for <firstname.lastname@example.org>; Thu, 27 Jul 2006 09:43:00 -0700
Received: from 220.127.116.11
(SquirrelMail authenticated user email@example.com
by mailicopycenter.com with HTTP id Ab44qw9z082056189;
Thu, 27 Jul 2006 16:50:40 +0000
Date: Thu, 27 Jul 2006 16:50:40 +0000
Subject: ONLINE MEDICATION? easy !
From: "Dahlia" <firstname.lastname@example.org>
Content-Type: text/html; charset=iso-8859-1
X-Priority: 3 (Normal)
Spam for viagra follows...