==================================================================
Please DO NOT REPLY to this mail or send email to the developers
about this bug. Please follow-up to Bugzilla using this link:
http://bugs.contribs.org/show_bug.cgi?id=8818
Have you checked the Frequently Asked Questions (FAQ)?
http://wiki.contribs.org/SME_Server:Documentation:FAQ
Please also take the time to read the following useful guide:
http://www.chiark.greenend.org.uk/~sgtatham/bugs.html
==================================================================
Bug ID: 8818
Summary: False outgoing email alert
Classification: Contribs
Product: SME Contribs
Version: 8.1
Hardware: ---
OS: ---
Status: UNCONFIRMED
Severity: normal
Priority: P3
Component: smeserver-sme8admin
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
Sme8admin sends alert messages for excessive outgoing mail when no mail has
actually been sent.
The cause is spammers spoofing a local domain in the MAIL FROM: and sme8admind
v1.2 counting these messages as outgoing mail. The qpsmtp rules have so far
trapped all these messages before being queued.
Looking through the qpsmtpd log a better line to look at is probably the
"logging::logterse plugin" one. This contains the MAIL FROM: and RCPT TO:
fields but also whether the message was denied or queued. I haven't quite
managed to work out what the code is doing when it's checking the MAIL FROM: or
RCPT TO: lines.
Counting the denied messages would produce and interesting statistic, my system
has denied 310 messages in the last 48 hours or so.
--
You are receiving this mail because:
You are the QA Contact for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at http://lists.contribs.org/mailman/public/contribteam/
