Are those the full headers? They do not include any Received: headers.
-ScottAt 12:46 PM 9/5/2003, John Tolmachoff \(Lists\) wrote:
Here is the header: (Retrieved from the Exchange log of the recipient)
Date: Fri, 5 Sep 2003 00:09:47 -0700 Message-Id: <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii From: "Postmaster" <[EMAIL PROTECTED]> Reply-To: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: WARNING: WE BLOCKED A VIRUS SENT TO YOU! X-Mailer: <IMail v8.02> X-Declude-Sender: [EMAIL PROTECTED] [127.0.0.1] X-Declude-Spoolname: D2967f2315dc.GSC X-RBL-Warning: Total weight: -28 X-Tests-Failed: HELOBOGUS, IPNOTINMX, HOSTEDDOMAINS, SPAMCHECK X-Note: This E-mail was sent from ([127.0.0.1]). X-Note: This e-mail was scanned by eServices For You for Viruses and SPAM. X-Note: To report any issues, please contact [EMAIL PROTECTED]
John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Friday, September 05, 2003 9:24 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Warnings in HJ log > > > >I am seeing this warning on messages that Declude creates using the > >postmaster.eml file for virus notifications. > > > >Is this do to the message ID problem with IMail's mail1.exe? > > > >09/05/2003 00:09:47 Q2967f2315dc Warning: Could not find IP3 end on first > >line of datafile (bound)? > > That's an odd one that I haven't seen before. That will occur if there is > an IP that doesn't exist -- for example, "Received: from > hostname.example.com []" or "Received: from hostname.example.com [not an IP > in here]". > > If you were able to get the full headers of this E-mail, that would provide > a big clue as to what happened. > > The only problem this will cause is that the Declude will assume that the > E-mail is coming from 127.0.0.1. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you have been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
