Imail will not put any other address in the Q file it creates during the receiving of the message other than what the sending mail server says it is for. Since you backup MX is only configured for one domain, Imail will only receive for that domain.
Now, what you might want to check is if the sending mail server is say the message is to user1 @ yahoo . com @ yourdomain . com (without the spaces) in which case Imail may then deliver it to [EMAIL PROTECTED] John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > [EMAIL PROTECTED] On Behalf Of Joe Wolf > Sent: Tuesday, September 16, 2003 6:31 AM > To: [EMAIL PROTECTED] > Subject: Re: SPAM:Re: [IMail Forum] Spammer found a way... > > Len, and others > > I can't post the logs easily since our security policy prevents using email > clients on servers, but Len you are right I suppose. Forgive my ignorance > since I'm not an Imail expert. > > The message shows two addresses. One domain is in the HOSTS file and one is > not (a bunch of yahoo.com addresses). > > The ones being delivered in the log are via a RCPT TO: field to the > yahoo.com addresses. And it looks like they are being delivered. > > Am I looking at this wrong. If so I apologize. > > -Joe > > ----- Original Message ----- > From: "Len Conrad" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, September 16, 2003 8:08 AM > Subject: SPAM:Re: [IMail Forum] Spammer found a way... > > > > > > >Here's what the spammers are doing. They send a message to the BACKUP > > >server with a known BAD primary mail address for a domain in the HOSTS > > >file and a SPAM CC address that they want to send to. > > > > the cc: header contents are not used for delivery > > > > the "spam cc" domain is in the hosts file? > > > > >The backup server accepts the mail because it is addressed to a domain in > > >the HOSTS file and needs to send it on to the primary mail server. > > > > > >Here's the problem: It goes ahead and delivers the SPAM CC message right > > >away. > > > > > >The bad primary message will get bounced, but that doesn't matter... the > > >spammer got his message delivered off my backup server. > > > > > >How can I stop this? Any ideas? > > > > If what you are saying really is happening (show the MTA's log lines for > > the bad main and good cc domains), it's not your fault, it's a bug in the > > MTA on the backup MX server. > > > > The backup MX function should only work for the domains in the envelope > > RCPT TO: field (that's the only domain exposed during the SMTP session), > > not in the cc: __header__ > > > > Len > > > > > > > __________________________________________________________________ > ___ > > http://MenAndMice.com/DNS-training: San Jose; Wash DC; Dallas; Atlanta > > IMGate.MEIway.com: anti-spam gateway, effective on 1000's of sites, free > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
