Hi folks I received a message today in my root account: ##SNIP START Subject: message not delivered Date: Sun, 12 Feb 2006 17:21:13 +0100 From: "Mail system" <[EMAIL PROTECTED]> .. Your message for [EMAIL PROTECTED], subject: "Undelivered Mail Returned to Sender" was rejected because mailbox does not exists ##SNIP END
Then I looked for the reason and found none! I never tried to send such a message. Looking at my logs, I see receiving a (as spam detected) mail with this source address. But my configuration looks: (trying to reduce to relevant parts) ##SNIP START $final_virus_destiny = D_DISCARD; $final_banned_destiny = D_BOUNCE; $final_spam_destiny = D_REJECT; $final_bad_header_destiny = D_PASS; $sa_tag2_level_deflt = 6.31; $sa_kill_level_deflt = 12; $sa_dsn_cutoff_level = 15; ##SNIP END Now my SPAM report looks like: ##SNIP START Unsolicited bulk email from: [EMAIL PROTECTED] Subject: Re: mainland synchrophasotron According to the 'Received:' trace, the message originated at: fionline.it (dslb-084-058-213-082.pools.arcor-ip.net [84.58.213.82]) The message WILL NOT BE delivered to: <[EMAIL PROTECTED]>: 550 5.7.1 Message content rejected, UBE, id=15076-01 ##SNIP END So my system never "sendt a mail" but rejected one being detected as spam. Why do I receive such a delivery failure notification? I expect that the strange SPAMmer software which originated SPAM to be sendt to my server and faking that address, generated a error report sendt to the server of the faked address due to my REJECT. Strange behaviour... Do you agree? This mail really made me unsure about my system functionality and security. Since any kind of mail going out of my system is being written to a log and there's nothing like that... I never saw such a behaviour before. Any opinion appreciated. :-) Miro Including me in reply list personally wished +-------------------------------+ +-------------------------------+ | Miro Dietiker | | MD Systems Miro Dietiker | +-------------------------------+ +-------------------------------+ ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
