I keep getting the most annoying emails sent daily that contain Klez. Here is the information that qmail-scanner reports:
................................................................ Your message was sent with the following envelope:
MAIL FROM: [EMAIL PROTECTED] RCPT TO: [EMAIL PROTECTED]
... and with the following headers:
---
MAILFROM: [EMAIL PROTECTED]
Received: from mpls-qmqp-01.inet.qwest.net (63.231.195.112)
by 0 with SMTP; 1 Jul 2003 02:36:25 -0000
Received: (qmail 97473 invoked by uid 0); 1 Jul 2003 02:35:03 -0000
Received: from unknown (63.231.195.9)
by mpls-qmqp-01.inet.qwest.net with QMQP; 1 Jul 2003 02:35:03 -0000
Received: from albqdslgw1poold59.albq.uswest.net (HELO Nwrhwns) (63.227.107.59)
by mpls-pop-09.inet.qwest.net with SMTP; 1 Jul 2003 02:34:58 -0000
From: "cskousen" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: A special humour game
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=K10S4V91Yfw8DBQx12vfh82u
................................................................
So I added [EMAIL PROTECTED] to my badmailfrom list; attempts to deliver mail through an SMTP session manually result in rejection when [EMAIL PROTECTED] is used as the 'mail from: ' input.
Mail is still coming through from [EMAIL PROTECTED] though. Am I right in assuming that if these messages are being stopped at the 'badmailfrom' level, then I shouldn't be seeing qmailscanner scanning the attachements since the message should never be queued?
TIA,
DS
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
