Hello,
I'm running a store & forward server with qmail 1.03. We only relay for
domains we put in /var/qmail/rcpthosts and for one ip address (the mail
server itself) in /etc/tcp.smtp.cdb. Lately we've been finding spam on our
queue with no "To:" address in the header field, although when I inspect the
maillog I can see that the recipient is for a user at one of our domains
(i.e. one of the domains in the rcpthosts file).
For example, here's a header from today:
--------------
MESSAGE NUMBER 917539
--------------
Received: (qmail 15374 invoked from network); 14 Sep 2000 11:09:41 -0000
Received: from unknown (HELO exch01.Fex.com) (209.179.82.60)
by ourserver.ourdomain.com with SMTP; 14 Sep 2000 11:09:41 -0000
Received: from 70p3iB95p ([10.0.0.1]) by exch01.Fex.com with SMTP (Microsoft
Exc
hange Internet Mail Service Version 5.5.2650.21)
id SKM5R528; Thu, 14 Sep 2000 03:37:52 -0700
DATE: 14 Sep 00 2:11:50 AM
FROM: [EMAIL PROTECTED]
Message-ID: <5hBKWsxRdIi>
SUBJECT: >> Planes, Trains, & Automobiles! What do they all have in common?
When I looked up message 917539 in the maillog, I found this:
Sep 14 07:09:41 voodoo qmail: 968929781.869508 new msg 917539
Sep 14 07:09:41 voodoo qmail: 968929781.872968 info msg 917539: bytes 10947
from
<[EMAIL PROTECTED]> qp 15374 uid 701
Sep 14 07:09:41 voodoo qmail: 968929781.881842 starting delivery 541: msg
917539
to remote [EMAIL PROTECTED]
Sep 14 07:09:41 voodoo qmail: 968929781.887705 status: local 0/10 remote
1/20
Sep 14 07:09:42 voodoo qmail: 968929782.099443 delivery 541: deferral:
Sorry,_I_
wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
Any idea how the To address ([EMAIL PROTECTED]) is not appearing in
the message header?
-Laura
