Envahi de spams : Infections ?

[Pey]

L'asso qui figure dans l'adresse des mails a un site internet avec un annuaire en ligne (protégé par un mot de passe + login) : Est-ce que l'infection pourrait provenir du site lui même ?

[Malekal_morte]

L'email de l'expéditeur ne veut rien dire, il ne faut pas s'y fier.

Il faut regarder l'adresse IP de l'expéditeur.

[Pey]

Quand je fais " options" dans le menu affichage pour les mails j'obtiens ces réponses (ici vont suivre les résultats de 3 mails pris au hasard) (j'ai remplacé mon adresse email par "monadresse") :

 

Return-Path: <>

Delivered-To: online.fr-monadresse@free.fr

Received: (qmail 18633 invoked from network); 11 Sep 2006 18:59:52 -0000

Received: from 83.143.18.78 (HELO web.althosting.net) (83.143.18.78)

by mrelay4-2.free.fr with SMTP; 11 Sep 2006 18:59:52 -0000

Received: (qmail 50230 invoked by uid 89); 11 Sep 2006 19:04:32 -0000

Delivered-To: ninjamarie-ann@asso-cdci.org

Received: (qmail 50200 invoked by uid 2023); 11 Sep 2006 19:04:27 -0000

Received: from 69.37.198.110 by web.althosting.net (envelope-from <>, uid 82) with qmail-scanner-1.25

(spamassassin: 3.0.4.

Clear:RC:0(69.37.198.110):SA:0(0.1/5.0):.

Processed in 6.028431 secs); 11 Sep 2006 19:04:27 -0000

X-Spam-Status: No, hits=0.1 required=5.0

Received: from unknown (HELO server01.local145hs.com) (69.37.198.110)

by web.althosting.net with SMTP; 11 Sep 2006 19:04:20 -0000

Received: by SERVER01 with Internet Mail Service (5.5.2653.19)

id <SCVM9APX>; Mon, 11 Sep 2006 14:54:10 -0400

Message-ID: <39320BBB8BE5D411B4CF00902745CCE502808D15@SERVER01>

From: System Administrator <postmaster@local145hs.com>

To: ninjamarie-ann@asso-cdci.org

Subject: Undeliverable: Re: More

Date: Mon, 11 Sep 2006 14:54:10 -0400

MIME-Version: 1.0

X-Mailer: Internet Mail Service (5.5.2653.19)

X-MS-Embedded-Report:

Content-Type: multipart/mixed;

boundary="----_=_NextPart_000_01C6D5D3.AA80F392"

 

 

Return-Path: <Symantec_Mail_Security_for_SMTP@adc.unitech.com.tw>

Delivered-To: online.fr-monadresse@free.fr

Received: (qmail 31702 invoked from network); 11 Sep 2006 10:08:19 -0000

Received: from 83.143.18.78 (HELO web.althosting.net) (83.143.18.78)

by mrelay4-1.free.fr with SMTP; 11 Sep 2006 10:08:19 -0000

Received: (qmail 50181 invoked by uid 89); 11 Sep 2006 10:13:03 -0000

Message-ID: <20060911101303.50180.qmail@web.althosting.net>

Delivered-To: WLJCF@asso-cdci.org

Received: (qmail 50168 invoked by uid 2023); 11 Sep 2006 10:13:03 -0000

Received: from 59.120.172.10 by web.althosting.net (envelope-from <Symantec_Mail_Security_for_SMTP@adc.unitech.com.tw>, uid 82) with qmail-scanner-1.25

(spamassassin: 3.0.4.

Clear:RC:0(59.120.172.10):SA:0(2.2/5.0):.

Processed in 4.671234 secs); 11 Sep 2006 10:13:03 -0000

X-Spam-Status: No, hits=2.2 required=5.0

X-Spam-Level: ++

Received: from adc.unitech.com.tw (HELO b2smtp.adc.unitech.com.tw) (59.120.172.10)

by web.althosting.net with SMTP; 11 Sep 2006 10:12:58 -0000

Date: Mon, 11 Sep 2006 18:07:30 +0800

From: Symantec_Mail_Security_for_SMTP@adc.unitech.com.tw

To: WLJCF@asso-cdci.org

Subject: Returned mail

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status; boundary="==M2006091118073004040"

X-Qmail-Scanner-Message-ID: <115796957968650153@web.althosting.net>

 

 

Return-Path: <>

Delivered-To: online.fr-monadresse@free.fr

Received: (qmail 13039 invoked from network); 11 Sep 2006 20:57:07 -0000

Received: from 83.143.18.78 (HELO web.althosting.net) (83.143.18.78)

by mx1-1.free.fr with SMTP; 11 Sep 2006 20:57:07 -0000

Received: (qmail 68432 invoked by uid 89); 11 Sep 2006 21:01:51 -0000

Delivered-To: toddyrelational@asso-cdci.org

Received: (qmail 68415 invoked by uid 2023); 11 Sep 2006 21:01:51 -0000

Received: from 66.113.130.234 by web.althosting.net (envelope-from <>, uid 82) with qmail-scanner-1.25

(spamassassin: 3.0.4.

Clear:RC:0(66.113.130.234):SA:0(3.6/5.0):.

Processed in 5.749324 secs); 11 Sep 2006 21:01:51 -0000

X-Spam-Status: No, hits=3.6 required=5.0

X-Spam-Level: +++

Received: from lsh127.siteprotect.com (66.113.130.234)

by web.althosting.net with SMTP; 11 Sep 2006 21:01:45 -0000

Received: from localhost (localhost)

by lsh127.siteprotect.com (8.11.6/8.11.6) id k8BKuxK11863;

Mon, 11 Sep 2006 15:56:59 -0500

Date: Mon, 11 Sep 2006 15:56:59 -0500

From: Mail Delivery Subsystem <MAILER-DAEMON@lsh127.siteprotect.com>

Message-Id: <200609112056.k8BKuxK11863@lsh127.siteprotect.com>

To: <toddyrelational@asso-cdci.org>

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status;

boundary="k8BKuxK11863.1158008219/lsh127.siteprotect.com"

Subject: Returned mail: see transcript for details

Auto-Submitted: auto-generated (failure)

 

-----

 

Ces messages semblent provenir d'adresses IP différentes les unes des autres... le site de l'asso est hébergé par Althosting.net qui renvoi les spams.

 

Peut-on tirer un enseignement de ces infos ?

[Malekal_morte]

Je pense que tu ne peux pas faire grand chose.

 

A par trier les mails selon des règles pour te faciliter le tri et la lecture.