Richard Pickett wrote: > The from address of <> is immediately suspicious because it should be > filled in, and I'd expect it to be an account on my box.
Kind of. The empty sender field suggests that this is a bounce mail, triggered by some other mail that arrived at your box. > 2007-08-27 11:49:39 1IPhmV-000291-01 <= <> R=1IPhmU-00020M-IE > U=mailnull P=local S=2043 > It appears this email is actually the result of another email: Exactly. > 2007-08-27 11:49:38 1IPhmU-00020M-IE <= [EMAIL PROTECTED] > H=201-35-180-84.cslce700.dsl.brasiltelecom.net.br [201.35.180.84] > P=smtp S=1149 > [EMAIL PROTECTED] > 2007-08-27 11:49:38 1IPhmU-00020M-IE ** > [EMAIL PROTECTED] R=virtual_aliases: > So it looks like I receive an email (1IPhmU-00020M-IE) that is bound > for a valid address on this box > ([EMAIL PROTECTED]), and somehow this email is > then split into another email going to [EMAIL PROTECTED] No, the delivery to [EMAIL PROTECTED] ultimately failed, and exim generated a bounce mail, that of course was directed to the sender of the original mail. Nothing special about the wohle case. I'm just wondering why the delivery failed, did you paste the wohle '**'-line from log? There's no error message. Might be possible, that the delivery has been failed explicitly in "/etc/valiases/$domain" by using ":fail:" or something. lg, daniel -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
