i have a couple of issues i'm trying to understand
this email was originaly generated by my server (from the subject line)
1- why was it sent to fanga.afribone.net.ml ? i do not send notification to
remote users
( ONLYSENDIFLOCALSENDER in sender.eml, and ONLYSENDIFLOCALRECIPIENT in
recep.eml)
2- how come the from adress is on my server and the mail came from
fanga.afribone.net.ml
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 28, 2003 2:09 PM
Subject: Re: [Declude.JunkMail] header problem
This one is very strange -- it looks like there was a mail loop involved,
it was scanned by several virus/spam scanners, it has highly unusual (and
likely broken) To:/Cc: headers, and appears as though it may have been
scanned twice on your server.
From the Received: headers, it appears that you received this from
fanga.afribone.net.ml, which added some of the Declude headers.
-Scott
At 07:43 AM 8/28/2003, serge wrote:
>attahed is a notification i received today
>notice the first 2 lines are supposed to be in the header but appears in
>the body
>please let me know what went wrong
>Received: from fanga.afribone.net.ml [216.147.136.2] by cefib.com with
ESMTP
> (SMTPD32-8.02) id A40F6F50220; Thu, 28 Aug 2003 10:06:07 +0000
>Received: from spammail by fanga.afribone.net.ml with spam-scanned (Exim
>3.36 #1)
> id 19sJep-0001Tv-00
> for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:06:06 +0000
>Received: from root by fanga.afribone.net.ml with scanned-ok (Exim 3.36 #1)
> id 19sJep-0001Ts-00
> for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:35 +0000
>Received: from majordomo by fanga.afribone.net.ml with local (Exim 3.36 #1)
> id 19sJep-0001Tk-00
> for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:35 +0000
>Received: from spammail by fanga.afribone.net.ml with spam-scanned (Exim
>3.36 #1)
> id 19sJeJ-0001SO-00
> for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:34 +0000
>Received: from root by fanga.afribone.net.ml with scanned-ok (Exim 3.36 #1)
> id 19sJeJ-0001SL-00
> for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:03 +0000
>Received: from [208.154.200.29] (helo=edmsa.net)
> by fanga.afribone.net.ml with esmtp (Exim 3.36 #1)
> id 19sJeI-0001P2-00
> for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:03 +0000
>Subject: [afim] Attention: On vous a envoy� un virus
>Date: Thu, 28 Aug 2003 10:03:57 +0000
>Message-Id: <[EMAIL PROTECTED]>
>Mime-Version: 1.0
>Content-Type: text/plain; charset=ISO-8859-1
>From: "Postmaster" <[EMAIL PROTECTED]>
>Reply-To: <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>CC: [EMAIL PROTECTED],
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>CC: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>CC: <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>,
> <[EMAIL PROTECTED]>
>X-Mailer: <IMail v8.02>
>X-RBL-Warning: IPNOTINMX:
>X-Declude-Sender: [EMAIL PROTECTED] [127.0.0.1]
>X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
>spam.
>X-Spam-Tests-Failed: IPNOTINMX
>X-weight: 0
>Precedence: bulk
>Sender: majordomo <[EMAIL PROTECTED]>
>X-Virus-Scanned: by Antivirus
>X-Spam-Status: No, hits=2.1 required=8.0
> tests=MIME_DEFICIENT_QP
> version=2.55
>X-Spam-Level: **
>X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
>X-RBL-Warning: HELOBOGUS: Domain fanga.afribone.net.ml has no MX or A
records.
>X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 216.147.136.2
>with no reverse DNS entry.
>X-RBL-Warning: FIVETEN-SPAM: 2.136.147.216.blackholes.five-ten-sg.com.
>X-Declude-Sender: [EMAIL PROTECTED] [216.147.136.2]
>X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
>spam.
>X-Spam-Tests-Failed: HELOBOGUS, REVDNS, FIVETEN-SPAM
>X-weight: 9
>X-Declude version: 1.75
>X-Note: This E-mail was sent from [No Reverse DNS] ([216.147.136.2]).
>X-RCPT-TO: <[EMAIL PROTECTED]>
>Status: U
>X-UIDL: 352740664
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
