Jberliner wrote on Wed, 14 Jan 2009 11:34:33 -0800 (PST): > A couple of things about the non-tagged messages: they usually feature a > spoofed sender address identical to the recipient, but not always: so, e.g. > From: <m...@mydomain.com> To: m...@mydomain.com. And, in looking at the > message > headers, a few things are consistently different about the bad messages. I > don't know if this is because SA or qmail-scanner rewrite the headers or > what...
Good. Seems, the problem is crfeated by specific messages. It's just weird that you have such a high percentage of these. Do you reject any mail at mTA level? I mean, if you don't you get a lot of mail that other people would never get and never hit this problem. I suggest you put up some messages somewhere for download, so others can check on their systems. It would probably be helpful if you try to find out if any of the anomalies are qmail-related. If others can replicate (and even if not) there might be a bug report due. The problem might not be in SA itself, but in some Perl library it depends on, so you should check all the modules it depends on for the version and try to upgrade. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com
