On 31 May 2005 at 14:14, Damian Menscher wrote: > On Tue, 31 May 2005, .rp wrote: > > > When using the -L option, all email from netzero was getting > > trapped. Is the bug in clamav-milter or netzero's email server? > > ClamAV has no bugs, so it must be netzero's fault. ;) > > Seriously, can you get a packet capture of an incoming message from > there? I strongly suspect they're at fault, but having that kind of > proof will make it easier to convince them to change their ways. > > Damian Menscher > -- here is what showed in our maillog: May 30 12:44:42 net sm-mta[31144]: j4UJiVwc031144: Milter: from=<[EMAIL PROTECTED]>, reject=550 5.7.1 You have claimed to be from me, but you are not May 30 12:44:43 net sm-mta[31144]: j4UJiVwc031144: from=<[EMAIL PROTECTED]>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=201-255-30-74.mrse.com.ar [201.255.30.74] (may be forged)
I turned off the -L and here is what the headers are for a netzero email: Return-Path: <[EMAIL PROTECTED]> Received: from outbound-mail.nyc.untd.com (outbound-mail.nyc.untd.com = [64.136.20.164]) by net.1234.biz (8.13.0/8.13.0) with SMTP id j51BEGDT032241 for <[EMAIL PROTECTED]>; Wed, 1 Jun 2005 04:14:26 -0700 Received: from outbound21-sr.nyc.untd.com (webmail23.nyc.untd.com = [10.141.27.163]) by smtpout06.nyc.untd.com with SMTP id AABBK5GDQAFJW4H2 for <[EMAIL PROTECTED]> (sender <[EMAIL PROTECTED]>); Wed, 1 Jun 2005 04:13:50 -0700 (PDT) X-UNTD-OriginStamp: = OonNg3M9sJo1NTTWoW+ecP3lLMqAAqmlSlrsq7j5EyfTcN0SmRzMeQ=3 D=3D Received: (from [EMAIL PROTECTED])=20 by webmail23.nyc.untd.com (jqueuemail) id KUEGRZDS; Wed, 01 Jun 2005 = 04:13:42 PDT Received: from [4.153.76.189] by webmail23.nyc.untd.com with HTTP: Wed, 1 Jun 2005 11:13:16 GMT X-Originating-IP: [4.153.76.189] Mime-Version: 1.0 From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Date: Wed, 1 Jun 2005 11:13:16 GMT To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: test X-Mailer: Webmail Version 3.0 Content-Type: text/plain Message-Id: <[EMAIL PROTECTED]> X-ContentStamp: 1:1:1004394087 X-UNTD-Peer-Info: = 10.141.27.163|webmail23.nyc.untd.com|outbound21- sr.nyc.untd.com|[EMAIL PROTECTED] etzero.net _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
