Salut la liste.

Je sais que ce n'est pas directement li� � Debian, mais c'est sur une
distrib Sarge/Sid que �a m'arrive.

Depuis 2 jours (probablement suite � un dist-upgrade), je re�ois de
temps en temps des mails qui ont boucl� sur mon serveur Exim.

Le domaine de destination de ces mails est puertorrico.com. C'est du
Spam ou des virus, mais c'est bizarre.

Les headers des messages sont:

Return-path: <>
Received: from localhost ([127.0.0.1] helo=cantor.tourde.home)
        by cantor.tourde.home with esmtp (Exim 3.36 #1 (Debian))
        id 1Au4Y5-0008JC-00
        for <[EMAIL PROTECTED]>; Fri, 20 Feb 2004 07:54:09 +0100
Received: from amavis by cantor.tourde.home with amavis-ok (Exim 3.36 #1 
(Debian))
        id 1Au4Y4-0008J7-00
        for <[EMAIL PROTECTED]>; Fri, 20 Feb 2004 07:54:08 +0100
Received: from localhost ([127.0.0.1] helo=cantor.tourde.home)
        by cantor.tourde.home with esmtp (Exim 3.36 #1 (Debian))
        id 1Au4Xz-0008Iy-00
        for <[EMAIL PROTECTED]>; Fri, 20 Feb 2004 07:54:03 +0100
Received: from amavis by cantor.tourde.home with amavis-ok (Exim 3.36 #1 
(Debian))
        id 1Au4Xx-0008Is-00
        for <[EMAIL PROTECTED]>; Fri, 20 Feb 2004 07:54:01 +0100
Received: from localhost ([127.0.0.1] helo=cantor.tourde.home)
        by cantor.tourde.home with esmtp (Exim 3.36 #1 (Debian))
        id 1Au4Xs-0008Ij-00
        for <[EMAIL PROTECTED]>; Fri, 20 Feb 2004 07:53:56 +0100

... etc... (beaucoup) et finissent ainsi:

Received: from mail by cantor.tourde.home with local (Exim 3.36 #1 (Debian))
        id 1Attj7-0001PO-00
        for <[EMAIL PROTECTED]>; Thu, 19 Feb 2004 20:20:49 +0100
X-Failed-Recipients: [EMAIL PROTECTED]
From: Mail Delivery System <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Mail delivery failed: returning message to sender
Message-Id: <[EMAIL PROTECTED]>
Date: Thu, 19 Feb 2004 20:20:49 +0100
X-Scanned-By: AMaViS-ng (at) tourde.org and al.
X-Scanned-By: AMaViS-ng (at) tourde.org and al.
... 15 fois en tout.

host me dis:
fermat:~# host puertorrico.com
puertorrico.com has address 0.0.0.0

Mais dig r�ponds au MX :
;; ANSWER SECTION:
puertorrico.com.        900     IN      MX      20 
puertorrico-com-bk.mr.outblaze.com.
puertorrico.com.        900     IN      MX      10 
puertorrico-com.mr.outblaze.com.

qui ont des adresse valides.

�a boucle probablement parce que Exim voit que l'ip est 0.0.0.0 et
donc me renvoie �a � moi, mais est-ce bien normal qu'il ne tente pas
de passer par le MX ???

Merci d'avance.
-- 
Sorry.  Nice try.

Répondre à