RSP:That header wasn't added by IMail.  It means that fanga.afribone.net.ml
received the E-mail from 208.154.200.29 (which most likely identifies
itself as edmsa.net).

that IS OUR imail server
we received 2 of those today
i will continue to monitor


RSP:Ah, then it may have actually come from your server.  But that still
doesn't explain the extra Received: headers.

exactly, but why did not the onlysendif.... work ?


----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 28, 2003 4:35 PM
Subject: Re: [Declude.JunkMail] header problem



> >1- why was it sent to fanga.afribone.net.ml ? i do not send notification
to
> >remote users
> >      ( ONLYSENDIFLOCALSENDER in sender.eml, and ONLYSENDIFLOCALRECIPIENT
>in
> >recep.eml)
>
>RSP: It was NOT sent there.  It was RECEIVED from there.
>
>sorry, i'm slow today, but i still do not get it :)
>the subject line "Attention: On vous a envoy� un virus" is defenitly our
>notification.

I would personally not worry about this if it was just one E-mail.  That
E-mail was very convoluted.

Since it was received from another server, it may be that it was an
improper bounce message?

>and also the first "received" in the header is showing our server adress
>(non-virtual secondary host)

Ah, then it may have actually come from your server.  But that still
doesn't explain the extra Received: headers.

>doesn't this mean it was generated by our server and sent to fanga ?
>
>Received: from [208.154.200.29] (helo=edmsa.net)
>  by fanga.afribone.net.ml with esmtp (Exim 3.36 #1)
>  id 19sJeI-0001P2-00
>  for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:03 +0000

That header wasn't added by IMail.  It means that fanga.afribone.net.ml
received the E-mail from 208.154.200.29 (which most likely identifies
itself as edmsa.net).

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to