AFAIK "Internet Mail Service" means that the sender is using Microsoft Exchange client to send the email. I wouldn't recommend blocking all email coming from this client as you are likely to block more legitimate mail than spam. --Adam On Thu, Jun 17, 1999 at 11:27:30AM +0200, torben fjerdingstad wrote: > I my postmaster mailbox I get a lot of trash from those of > our customers that use an MTA which identifies itself as: > Internet Mail Service (5.5.2232.9) and > Internet Mail Service (5.5.2448.0). > > That really a pain. > > How can I prevent those messages from ending up as double > bounces in my postmaster mailbox? They are totally useless, > even for spammer tracing, because the received lines are > missing. > > Can I make qmail block them? > > I think the blocking criteria might be: > If return-path is empty and from is [EMAIL PROTECTED], drop it. > > What would you do / what are you doing? > Do you know the product so I can tell the customers how to fix > their systems? > > Here is a typical message that ends up as a double bounce. In this > case the bogus sender is a spammer. It could also originate from > a non-spammer, and sometimes it is a positive delivery notification > like "Your message was delivered to the following recipeint(s):": > > Return-Path: <> > Received: (qmail 12368 invoked from network); 17 Jun 1999 07:10:22 -0000 > Received: from foulum01.agrsci.dk (130.226.240.22) > by mail.net.uni-c.dk with SMTP; 17 Jun 1999 07:10:22 -0000 > Received: by foulum01.agrsci.dk with Internet Mail Service (5.5.2232.9) > id <NBKR28MG>; Thu, 17 Jun 1999 09:09:14 +0200 > Message-ID: <[EMAIL PROTECTED]> > From: System Administrator <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: Undeliverable: "How to Pay Zero Taxes" Selling in stores for $30,Free! > axwdm > Date: Thu, 17 Jun 1999 09:09:13 +0200 > MIME-Version: 1.0 > X-Mailer: Internet Mail Service (5.5.2232.9) > X-MS-Embedded-Report: > Content-Type: multipart/mixed; > boundary="----_=_NextPart_000_01BEB890.4E28FAE4" > > This message is in MIME format. Since your mail reader does not understand > this format, some or all of this message may not be legible. > > ------_=_NextPart_000_01BEB890.4E28FAE4 > Content-Type: text/plain > > Your message > > To: [EMAIL PROTECTED] > Subject: "How to Pay Zero Taxes" Selling in stores for $30,Free! > axwdm > Sent: Thu, 17 Jun 1999 09:06:55 +0200 > > did not reach the following recipient(s): > > [EMAIL PROTECTED] on Thu, 17 Jun 1999 09:09:11 +0200 > The recipient name is not recognized > MSEXCH:IMS:Danmarks JordbrugsForskning:Foulum:FOULUM01 0 (000C05A6) > Unknown Recipient > > ------_=_NextPart_000_01BEB890.4E28FAE4 > Content-Type: message/rfc822 > Content-Location: ATT-0-223AA4ED5324D311997600805F8BB749 > > Message-ID: <[EMAIL PROTECTED]> > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: "How to Pay Zero Taxes" Selling in stores for $30,Free! > axwdm > Date: Thu, 17 Jun 1999 09:06:55 +0200 > MIME-Version: 1.0 > X-Mailer: Internet Mail Service (5.5.2232.9) > X-MS-Embedded-Report: > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > [ body deleted by me ] > > ------_=_NextPart_000_01BEB890.4E28FAE4-- > > > -- > Med venlig hilsen / Regards > Netdriftgruppen / Network Management Group > UNI-C > > Tlf./Phone +45 35 87 89 41 Mail: UNI-C > Fax. +45 35 87 89 90 Bygning 304 > E-mail: [EMAIL PROTECTED] DK-2800 Lyngby >