Here's what I believe is happening (finally tracked down a bogus mail message to investigate in more detail):
The mail comes in and the FROM address has spaces or something in the field. This somehow gets expanded through a variable somewhere on the system to be a wrong address. In the example below, I am changing the "real" addresses, but keeping the necessary components the same. Original FROM (this is supposition): Company Training [EMAIL PROTECTED] Rewritten FROM: [EMAIL PROTECTED] FROM Header: From: [EMAIL PROTECTED], [EMAIL PROTECTED], "Services <technicaltraining"@outsidedomain.com As you can see, the very first word of the [possibly malformed] original FROM header has been appended with my domain name. Since it is the first one in the list, it is the one that the mail client shows. This may or may not be the MTA doing this (I just don't know yet). However, my initial thought is that the header is being rewritten somewhere within amavisd to look like this. Call it a hunch at this point, but that's my initial guess (I'm not always right, but you have to start somewhere). Unfortunately, I do not have a source "elsewhere" to see what the original header looked like in the message. I run amavisd/postfix/clam on a system at my house and push all my POP mail through it. It happens there sometimes, and I'm waiting for one of those since I will be able to go back to the original message source and examine the actual headers... - Mark Clifton Royston wrote: > On Mon, Oct 23, 2006 at 03:09:07PM -0400, Mark Burdick wrote: > >> When message is finally delivered to jsmith, it *appears* to be from >> something like "[EMAIL PROTECTED]". Yet, this information isn't >> inside the message itself. >> > > This sounds like a common MTA configuration issue. The mail comes in > with just "From: missy" in the visible From: header, and your MTA > (Postfix in this case) completes it to a valid address using its own > host/domain name. This is legacy behavior in many MTAs; note that > this would be the right thing to do if for example your own user "jack" > sent email to user "jill" on the same system. However, it's annoying > and arguably wrong when applied to incoming spam. > > If this is what you're seeing, it's nothing to do with amavisd. > > -- Clifton > > ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
