> Thanks for the info.  As I suspected its time to
> turn off notifications to
> senders.

This may not be necessary.  I made the following two
changes and the Klez situation is much better now.

1) Enable the sub-sender-cache.pl from the crontrib
folder.

2) Add the source IP address to the headers.   You can
do this in one line within the q-s script.  Here is
what the new line and surrounding lines are:

Your message was sent with the following
headers:\n\n";
 
  print SM "From:    $headers{'from'}\n";
  print SM "To:      $headers{'to'}\n" if
($headers{'to'});
  print SM "Cc:  $headers{'cc'}\n" if
($headers{'cc'});
  print SM "Subject: $headers{'subject'}\n" if
($headers{'subject'});
  print SM "Message-ID: $headers{'message-id'}\n" if 
($headers{'message-id'});
  print SM "Date:    $headers{'date'}\n" if
($headers{'date'});
  print SM "\nSource IP Address: $remote_smtp_ip\n";
  print SM "\n

The $remote_smtp_ip is calculated earlier in the
script, 
there is no extra work to figure it out, it was just
never reported.

Limiting the number of warnings to 3 per 7 days (I'm
still in the first week though) and adding the source
ip for people to use when troubleshooting has been
saving many people many headaches.

-zek

__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to