>1- why was it sent to fanga.afribone.net.ml ? i do not send notification to >remote users > ( ONLYSENDIFLOCALSENDER in sender.eml, and ONLYSENDIFLOCALRECIPIENT in >recep.eml)
RSP: It was NOT sent there. It was RECEIVED from there.
sorry, i'm slow today, but i still do not get it :) the subject line "Attention: On vous a envoy� un virus" is defenitly our notification.
I would personally not worry about this if it was just one E-mail. That E-mail was very convoluted.
Since it was received from another server, it may be that it was an improper bounce message?
and also the first "received" in the header is showing our server adress (non-virtual secondary host)
Ah, then it may have actually come from your server. But that still doesn't explain the extra Received: headers.
doesn't this mean it was generated by our server and sent to fanga ?
Received: from [208.154.200.29] (helo=edmsa.net) by fanga.afribone.net.ml with esmtp (Exim 3.36 #1) id 19sJeI-0001P2-00 for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:03 +0000
That header wasn't added by IMail. It means that fanga.afribone.net.ml received the E-mail from 208.154.200.29 (which most likely identifies itself as edmsa.net).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
