> It took 2 seconds to grep ClamAV sources..
>
> clamav-milter.c
>
> if(strchr("|;", *ptr) != NULL) {
> smfi_setreply(ctx, "554", "5.7.1", _("Suspicious recipient address blocked"));
>
> Yes it seems | and ; are blocked.
The "|" character might be used to expolit SMTP servers. It has no valid place
in an email address.
It is not a virus, probably spam, and/or an attempt to compromise the SMTP
server.
At your service,
-bryan bradsby
Postmaster
Texas State Government Net
NOC: 512-475-2432 877-472-4848
========================================================================
"If user education worked, it would have worked by now"
- Peter Gutmann, the Psychology of Insecurity
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html