i dont get it.. isnt the same message id? 1. 2008-12-09 16:53:51 H=(abbottexcellence.com) [59.25.246.201] F=<[EMAIL PROTECTED]> rejected RCPT <[EMAIL PROTECTED]>: Forged Sender address (claims to be local user [EMAIL PROTECTED], but isn't authenticated)
2. 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q <= [EMAIL PROTECTED] H=(abbottexcellence.com) [59.25.246.201] P=smtp S=887 T="Re: Order status" from <[EMAIL PROTECTED]> for [EMAIL PROTECTED] 3. 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q => /home/delfix.ro/dani/Maildir ([EMAIL PROTECTED]) <[EMAIL PROTECTED]> R=virtual_domains T=virtual_delivery DT=0s 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q Completed so you're telling me the "1LA3yE-0007Aq-9Q" id is coincidental ? > * Petre Daniel: > >>>> 2008-12-09 16:53:51 H=(abbottexcellence.com) [59.25.246.201] >>>> F=<[EMAIL PROTECTED]> rejected RCPT <[EMAIL PROTECTED]>: Forged Sender >>>> address (claims to be local user [EMAIL PROTECTED], but isn't >>>> authenticated) 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q <= >>>> [EMAIL PROTECTED] H=(abbottexcellence.com) [59.25.246.201] P=smtp >>>> S=887 T="Re: Order status" from <[EMAIL PROTECTED]> for >>>> [EMAIL PROTECTED] 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q => >>>> /home/delfix.ro/dani/Maildir ([EMAIL PROTECTED]) <[EMAIL PROTECTED]> >>>> R=virtual_domains T=virtual_delivery DT=0s 2008-12-09 >>>> 16:53:55 1LA3yE-0007Aq-9Q Completed >>>> >>>> >>> Looks like two different messages to me (first from >>> <[EMAIL PROTECTED]> and then <[EMAIL PROTECTED]>). >>> >> >> hello, its actually a spam message trying to impersonating me >> ([EMAIL PROTECTED]) which gets caught in my rcpt rule but then >> delivered to the maildir.. >> > > Yes, that's the first log line. But the remaining ones refer to a > different message, the one that got through. ------------------------------ http://www.textdrive.ro email: [EMAIL PROTECTED] TextDrive, cel mai simplu serviciu de gazduire: * 10 conturi de mail per domeniu fara limita de spatiu * 10 Gbytes spatiu de htdocs (php,gd,imagick,ffmpeg) * 1 baza de date mysql cu spatiu nelimitat de inregistrari * acces SSL la e-mail, ftp, pop3/imap si phpmyadmin --------------------------------------------------------------------- -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
