The name of the file "badmailfrom" can be a bit deceptive as many
people think it applies to the "From: " header. In fact it applies to
the return path address supplied by the "MAIL FROM: " command in SMTP.
To use badmailfrom you have to use the address that shows up on that
SMTP command, which in the case of qmail is stored in the
"Return-Path: " header.
If you look at your headers you'll see the bad news that the
"Return-Path: " header is empty which means it's not blockable with
badmailfrom.
Bad luck. As you've probably gathered spam is a pain to minimize.
Regards.
On Mon, Dec 04, 2000 at 07:41:58PM -0300, Ari Arantes Filho wrote:
> Hi,
>
> I'm receiving a virus from [EMAIL PROTECTED], I've already inserted this
> email in badmailfrom, the qmail was restarted and I'm still receiving this
> virus.
>
> In the header below you can see that the user doesn't exist, there is a
> 3D caracter in the beginning of the email address, so the address is
> unknowm, but even inserted in badmailfrom I've receive order mails from this
> guy.
>
> Here goes the header:
>
> Return-Path: <>
> Received: (qmail 14547 invoked by uid 0); 4 Dec 2000 21:26:48 -0000
> Received: from unknown (HELO mail01.osite.com.br) (200.189.209.130)
> by mail.doctordata.com.br with SMTP; 4 Dec 2000 21:26:48 -0000
> Received: from clipping (a09029.dial-pn.impsat.com.br [200.189.200.29])
> by mail01.osite.com.br (8.9.1b+Sun/8.9.3) with SMTP id SAA14499
> for <[EMAIL PROTECTED]>; Mon, 4 Dec 2000 18:49:02 -0200 (EDT)
> Date: Mon, 4 Dec 2000 18:49:02 -0200 (EDT)
> Message-Id: <[EMAIL PROTECTED]>
> From: Hahaha <[EMAIL PROTECTED]>
> Subject: Branca de Neve porn�!
> MIME-Version: 1.0
>
>
