[vchkpw] [Fwd: ezmlm warning]

[Rick Updegrove]

I think this is the same thing Jeremy is talking about...
--- Begin Message ---
Hi! This is the ezmlm program. I'm managing the
[EMAIL PROTECTED] mailing list.
I'm working for my owner, who can be reached
at [EMAIL PROTECTED]


Messages to you from the vchkpw mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.

If this message bounces too, I will send you a probe. If the probe bounces,
I will remove your address from the vchkpw mailing list,
without further notice.


I've kept a list of which messages from the vchkpw mailing list have 
bounced from your address.

Here are the message numbers:

   23631

--- Enclosed is a copy of the bounce message I received.

Return-Path: <>
Received: from unknown (HELO updegrove.net) (12.246.251.12)
  by evanston.inter7.com with SMTP; 7 Oct 2003 09:27:50 -0000
Received: (qmail 83002 invoked for bounce); 7 Oct 2003 08:13:52 -0000
Date: 7 Oct 2003 08:13:52 -0000
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: failure notice

Hi. This is the qmail-send program at updegrove.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[EMAIL PROTECTED]>:
message is looping /home/vpopmail/domains/updegrove.net/dislists/Maildir/

--- Below this line is a copy of the message.

Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 82998 invoked from network); 7 Oct 2003 08:13:52 -0000
Received: from unknown (HELO ns1.inter7.com) (209.218.8.2)
  by updegrove.net with SMTP; 7 Oct 2003 08:13:52 -0000
Received: (qmail 27027 invoked by uid 511); 7 Oct 2003 09:27:02 -0000
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Post: <mailto:[EMAIL PROTECTED]>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <mailto:[EMAIL PROTECTED]>
Delivered-To: mailing list [EMAIL PROTECTED]
Received: from unknown (HELO rous.redbarn.org) (204.152.188.41)
  by evanston.inter7.com with SMTP; 7 Oct 2003 09:27:01 -0000
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Eric Ziegast)
In-reply-to: Your message of "Tue, 07 Oct 2003 00:55:40 PDT."
             <[EMAIL PROTECTED]> 
Date: Tue, 07 Oct 2003 01:12:40 -0700
Sender: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
Subject: Re: [vchkpw] unexpected Delivered-To 

> >> How can this happen?
> > 
> > *Any* header can be forged.    :^)
> 
> Ok, but I'm not clear on one thing.  qmail+vpopmail is going to route
> locally based on the to field of the incoming message, right?  So you are
> saying this message was forged locally, meaning a hacked server?

The envelope recipient ("RCPT TO:") is what qmail mostly cares about.
The normal message headers are fluffy bits of superfluous information
that could help it detect a mail loop.

Your message appears to have had a "To:" header of "[EMAIL PROTECTED]"
(forged) and an envelope recipient of "[EMAIL PROTECTED]" (not forged)
or maybe even some other address that aliases itself to kurt.

> Curiously your off-list reply cased my server to generate this message:
>     message is looping /var/vpopmail/domains/breathsense.com/kkb/Maildir/

Why would your server bounce it in the first place?  Fix that!

--
Eric Ziegast
[EMAIL PROTECTED]
(aka [EMAIL PROTECTED])
(aka [EMAIL PROTECTED])



--- End Message ---