Yes I am certain that the email originated from a compromised user and sent out
through Squirrelmail.
See below for a sample email.
Received: from 83.229.67.26
(SquirrelMail authenticated user auser)
by mail.domain.net with HTTP;
Fri, 9 Nov 2007 11:30:29 -0600 (CST)
Messa
Have you looked in the INBOX.Sent to verify that they are logging in and
sending the mail via SquirrelMail? I ask this since I do occasionally get
rejects from mail I didn't send out but someone is trying to spoof my mail
server. In fact, the mail shows as being sent from an account I don't
have
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Fredrik Jervfors
> Sent: Tuesday, November 13, 2007 12:05 PM
> To: Squirrelmail User Support Mailing List
> Subject: Re: [SM-USERS] Username plugin translation
>
> "Jevos, Peter":
> > "Fredrik Jervf
