I've got this in my queue:
5 Jun 2001 14:44:17 GMT #48256 5651 <[EMAIL PROTECTED]>
remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
Neither mail.com nor mindless.com are my domains
[root@austin-jump network-scripts]# more /etc/qmail/control/locals
austin-jump.vircio.com
jump-austin.vircio.com
ns1.vircio.com
plywood.hayslumber.com
[root@austin-jump network-scripts]# more /etc/qmail/control/rcpthosts
asistacorp.com
aus.ucrrealty.com
austin-jump.vircio.com
avails.com
beecavecontract.com
bonner-carrington.com
bonnercarrington.com
borderent.com
breakfastbuzz.com
coastaltechcorp.com
communityinvestment.com
cordesign.com
deepeddy.com
fontaine.org
hayslumber.com
hearthstonehealth.com
hillcountry.com
jcevans.com
jump-austin.vircio.com
mailhost.asistacorp.com
mailhost.aus.ucrrealty.com
mailhost.bonner-carrington.com
mailhost.bonnercarrington.com
mailhost.borderent.com
mailhost.breakfastbuzz.com
mailhost.communityinvestment.com
mailhost.cordesign.com
mailhost.deepeddy.com
mailhost.hayslumber.com
mailhost.parkbendhealth.com
mailhost.sagebrookhealth.com
mailhost.sat.ucrrealty.com
mailhost.smart-cycle.com
mailhost.stonebridgehealth.com
mailhost.tx.com
mailhost.ucr-sa.com
mailhost.vircio.com
mailhost.warrencordes.com
mailhost.yakuh.com
nevmg.com
ns1.vircio.com
nursinghomealliance.org
parkbendhealth.com
plywood.hayslumber.com
quannah.com
quannahracing.com
sagebrookhealth.com
sat.ucrrealty.com
scicomp.com
scicomp.net
scicomp.org
stonebridgehealth.com
thevanco.com
tx.com
ucr-aus.com
ucr-sa.com
usandp.com
vercio.com
vircio.com
vistaoaksal.com
vistaoakshealth.com
warrencordes.com
weaver.net
yakuh.com
my smtp.cdb contains:
10.:allow,RELAYCLIENT=""
:allow
Looking at the guts of the message in the queue, I find:
[root@austin-jump network-scripts]# more /var/qmail/queue/*/*/48256|more
::::::::::::::
/var/qmail/queue/info/2/48256
::::::::::::::
[EMAIL PROTECTED]::::::::::::::
/var/qmail/queue/mess/2/48256
::::::::::::::
Received: (qmail 2993 invoked by uid 104); 5 Jun 2001 14:44:17 -0000
Received: from [EMAIL PROTECTED] by austin-jump.vircio.com with qmail-scanner-
0.90 (uvscan: v4.1.20/v4127. . Clean. Processed in 3.919065 secs); 05/06/2001 09
:44:13
Received: from pppa16-resaleeasternmab1-3r7830.dialinx.net (HELO oemcomputer???1
02.74.4.25???by?mtiwmhc08.worldnet.att.net??InterMail?v03.02.07.07?118-134??with
?SMTP?id??20000116195506.ZOOK28505@oemcomputer??from?worldnet.att.net???12.77.19
4.15???by?mtiwmhc03.worldnet.att.netmindspring??user-3qt5hn.dialup.mindspring.co
m?99.174.150.55???by?smtp6.mindspring.com??8.9.3/8.8.5??with?SMTP?id?OAA06398??f
rom?110140321worldnet.att.net???102.70.21.32???by?mtiwmhc98.worldnet.att.net??In
terMail?v03.02.07.07?118-134??with?SMTP?id?20090116195452.ZOMX28505@110940321wor
ldnet.att.net?myrop??ew6.southwind.net??216.53.98.70???by?onyx.southwind.net?fro
m?homepage.com??114.230.197.216??by?newmail.spectraweb.ch?from?default??m202.2-2
5.warwick.net??218.242.202.80???byhost.warwick.net??8.10.0.Beta10/8.10.0.Beta10?
?with?SMTP?id?e9GKEKk19201mcpeely.concentric.net??mcfeely.concentric.net??217.15
.198.83??by?darius.concentric.net??8.9.1a/?98/12/15?5.12???id?PAA04003from?defau
lt??m202.2-25.warwick.net??218.242.202.80???byhost.warwick.net??8.10.0.Beta10/8.
10.0.Beta10??with?SMTP?id?e0GKEKk19201taffar??pool-209-138-205-92-dlls.grid.net?
?219.138.205.92???by?smtp7.atl.mindspring.net??ts029d25.nil-ny.concentric.net??2
16.173.24.181??) ([4.45.125.13]) (envelope-sender <[EMAIL PROTECTED]>)
by 216.30.106.234 (qmail-ldap-1.03) with SMTP
for <[EMAIL PROTECTED]>; 5 Jun 2001 14:44:12 -0000
Message-ID: <000043dd503b$000074cb$000057aa@oemcomputer ([102.74.4.25]) by mtiwm
hc08.worldnet.att.net (InterMail v03.02.07.07 118-134) with SMTP id <20000116195
506.ZOOK28505@oemcomputer> from worldnet.att.net ([12.77.194.15]) by mtiwmhc03.w
orldnet.att.netmindspring (user-3qt5hn.dialup.mindspring.com[99.174.150.55]) by
smtp6.mindspring.com (8.9.3/8.8.5) with SMTP id OAA06398 from 110140321worldnet
.att.net ([102.70.21.32]) by mtiwmhc98.worldnet.att.net (InterMail v03.02.07.07
118-134) with SMTP id<[EMAIL PROTECTED]>myrop (
ew6.southwind.net [216.53.98.70]) by onyx.southwind.net from homepage.com (114.2
30.197.216) by newmail.spectraweb.ch from default (m202.2-25.warwick.net [218.24
2.202.80]) byhost.warwick.net (8.10.0.Beta10/8.10.0.Beta10) with SMTP id e9GKEKk
19201mcpeely.concentric.net (mcfeely.concentric.net [217.15.198.83])by darius.co
ncentric.net (8.9.1a/(98/12/15 5.12)) id PAA04003from default (m202.2-25.warwick
.net [218.242.202.80]) byhost.warwick.net (8.10.0.Beta10/8.10.0.Beta10) with SMT
P id e0GKEKk19201taffar (pool-209-138-205-92-dlls.grid.net [219.138.205.92]) by
smtp7.atl.mindspring.net (ts029d25.nil-ny.concentric.net [216.173.24.181])>
To: <Undisclosed Recipients>
From: [EMAIL PROTECTED]
Subject: Could you use this?
Date: Tue, 05 Jun 2001 10:42:20 -0700
X-Priority: 3
X-MSMail-Priority: Normal
....
::::::::::::::
/var/qmail/queue/remote/2/48256
::::::::::::::
[EMAIL PROTECTED]@[EMAIL PROTECTED]@mindless.comDswee
[EMAIL PROTECTED]@[EMAIL PROTECTED]@mindless.
[EMAIL PROTECTED]@[EMAIL PROTECTED]@mindles
[EMAIL PROTECTED]@mindless.com
so it appears that the message arrived from
pppa16-resaleeasternmab1-3r7830.dialinx.net at 4.45.125.13.
I don't know why this wasn't rejected by tcpcontrol.
I'm using RPMs based on bruce's, and this is how smtpd is started up:
[root@austin-jump network-scripts]# more /var/service/smtpd/run
#!/bin/sh
. /usr/lib/qmail/run-functions
# If rblsmtpd is installed, process rbltimeout rbldomains, and antirbldomains
if [ -x /usr/bin/rblsmtpd ]; then
readdefault domains antirbldomains ""
for domain in $domains; do
rblopts="$rblopts -a $domain"
done
readdefault domains rbldomains ""
for domain in $domains; do
rblopts="$rblopts -r $domain"
done
readdefault timeout rbltimeout 60
if [ -n "$rblopts" ]; then
rbl="/usr/bin/rblsmtpd -t $timeout $rblopts"
fi
fi
# Start daemons.
uid="`id -u qmaild`"
gid="`id -g qmaild`"
readdefault concurrency concurrencysmtpd 20
do_ulimits
exec tcpserver -u "$uid" -g "$gid" -c "$concurrency" -v -X \
-x /etc/tcpcontrol/smtp.cdb 0 smtp $rbl \
fixcrio qmail-smtpd
Chris
--
Chris Garrigues http://www.DeepEddy.Com/~cwg/
virCIO http://www.virCIO.Com
4314 Avenue C
Austin, TX 78751-3709 +1 512 374 0500
My email address is an experiment in SPAM elimination. For an
explanation of what we're doing, see http://www.DeepEddy.Com/tms.html
Nobody ever got fired for buying Microsoft,
but they could get fired for relying on Microsoft.
PGP signature
