Some spam made it through our Imail+JunkMail gateway last night, and I was
wondering how it did it, because there were NO headers added by JunkMail
Pro.

According to my sys0806.txt logfile, the message was received by IMail, then
it was later delivered to my internal mail server.

I found a few messages like this, all of which were received, then the IMail
smtpd service was administratively stopped and started, and when the
messages were delivered inbound, they had a .GMD extension instead of .SMD

I didn't find any mention of this in either the Mail Archives or the
Ipswitch IMail support archive.

I'm running Declude JunkMail v1.65 on IMail v7.13

Andrew 8)

Excerpted sys0806.txt is in the small text attachment.


08:06 17:10 SMTPD(007B014E) [10.192.99.216] connect 64.156.222.31 port 40726
08:06 17:10 SMTPD(007B014E) [64.156.222.31] HELO mail31.webhostads.com

08:06 17:10 SMTPD(007B014E) [64.156.222.31] MAIL FROM: <[EMAIL PROTECTED]>
08:06 17:10 SMTPD(007B014E) [64.156.222.31] RCPT TO: <[EMAIL PROTECTED]>
08:06 17:10 SMTPD(007B014E) [64.156.222.31] D:\IMail\spool\D98e2007b014e333d.SMD 5007

08:06 20:17 SMTP-(00000384) D:\IMail\spool\Q98e2007b014e333d.GMD
08:06 20:17 SMTP-(00000384) processing D:\IMail\spool\Q98e2007b014e333d.GMD
08:06 20:17 SMTP-(00000384) Trying bentall.com (0)
08:06 20:17 SMTP-(00000384) Connect bentall.com [10.192.0.215:25] (1)
08:06 20:17 SMTP-(00000384) 220 BT4Exch1.bentall.com InterScan VirusWall NT ESMTP 3.53 
(build 1563) ready at Wed, 06 Aug 2003 20:17:10 -0700
08:06 20:17 SMTP-(00000384) >EHLO mail.bentall.com
08:06 20:17 SMTP-(00000384) 250-BT4Exch1.bentall.com supports the following ESMTP 
extensions:
08:06 20:17 SMTP-(00000384) 250 SIZE 0
08:06 20:17 SMTP-(00000384) >MAIL FROM:<[EMAIL PROTECTED]>
08:06 20:17 SMTP-(00000384) 250 <[EMAIL PROTECTED]>: Sender Ok
08:06 20:17 SMTP-(00000384) >RCPT To:<[EMAIL PROTECTED]>
08:06 20:17 SMTP-(00000384) 250 [EMAIL PROTECTED]: Recipient Ok
08:06 20:17 SMTP-(00000384) >DATA
08:06 20:17 SMTP-(00000384) 354 BT4Exch1.bentall.com: Send data now.  Terminate with 
"."
08:06 20:17 SMTP-(00000384) >.
08:06 20:17 SMTP-(00000384) 250 BT4Exch1.bentall.com: Message accepted for delivery
08:06 20:17 SMTP-(00000384) rdeliver bentall.com [EMAIL PROTECTED] (1) <[EMAIL 
PROTECTED]> 4972
08:06 20:17 SMTP-(00000384) >QUIT
08:06 20:17 SMTP-(00000384) 221 BT4Exch1.bentall.com closing connection. Goodbye!
08:06 20:17 SMTP-(00000384) finished D:\IMail\spool\Q98e2007b014e333d.GMD status=1

Reply via email to