It should to [EMAIL PROTECTED] correct ? the email recipient gets the correct email Notification fine.
The smd file is attached Howard Smith N.O.R.A.D. Inc. P.O. Box 680116 Miami, Florida 33168 www.norad.com <http://www.norad.com/> [EMAIL PROTECTED] Office - (305) NETWORK (638-9675) Sales - (786) 206-0045 Fax 1 - (305) 359-5144 Confidentiality Notice: This email message, including any Attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact [EMAIL PROTECTED] by email and destroy all copies of the original message. _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, June 21, 2007 5:23 PM To: declude.virus@declude.com Subject: !!!PRE RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 And it is going to [EMAIL PROTECTED] instead of [EMAIL PROTECTED] ? %LOCALHOST% is picking up as norad17.norad.com which I think comes from the IMail header file, as this message was quarantined could you post the content of the q*.smd file? David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith (N.O.R.A.D.) Sent: Thursday, June 21, 2007 5:16 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 Here it is : Received: from SMTP32-FWD by norad17.norad.com (SMTP32) id A8F3200000A5CF1AE; Thu, 21 Jun 2007 10:46:11 -0400 Date: Thu, 21 Jun 2007 10:46:10 -0400 Message-Id: <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii From: "Postmaster" <[EMAIL PROTECTED]> Reply-To: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: N.O.R.A.D. SecureTrek Virus scanner detected a Email virus X-Mailer: <IMail v9.20> X-RCPT-TO: <[EMAIL PROTECTED]> Status: X-UIDL: 478741403 X-IMail-ThreadID: 8f3200000a5cf1be N.O.R.A.D. SecureTrek Virus scanner v4.3.46 detected the [Outlook 'CR' Vulnerability] virus in [No attachment] from [EMAIL PROTECTED] to: [EMAIL PROTECTED] Date: 21 Jun 2007 10:46:10 Subject: !! All medications to cure yourself Spool File: D8f0209f30000707f.smd Remote IP: 83.9.68.60 Headers: [Deleted due to dangerous content] _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, June 21, 2007 4:34 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 Can you post a copy of the header of one of the messages ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith (N.O.R.A.D.) Sent: Thursday, June 21, 2007 3:51 PM To: declude.virus@declude.com Cc: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 No it has [EMAIL PROTECTED] The standard template at http://shopping.declude.com/version/EVA_Notifications/postmaster.txt . _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, June 21, 2007 12:50 PM To: declude.virus@declude.com Subject: RE: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 Does your postmaster.eml contain the following line ? To: [EMAIL PROTECTED] David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith (N.O.R.A.D.) Sent: Thursday, June 21, 2007 12:30 PM To: declude.virus@declude.com Subject: [Declude.Virus] Problem with postmaster.eml and imail 2006.2 The notification file postmaster.eml sends notification to the postmaster of the main IP domain of the Imail server instead of the postmaster of the actual virtual domain of the users. Any resolutions around Howard Smith --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
<<image002.gif>>
D8f0209f30000707f.smd
Description: Binary data
