On Mon, Aug 20, 2001 at 11:26:35AM -0700, Travis Turner wrote:
> --- Below this line is the original bounce.
> Return-Path: <>
> Received: (qmail 12564 invoked from network); 20 Aug 2001 15:20:09 -0000
> Received: from unknown (HELO mail.) (4.48.164.237)
> by mail.appliedi.com with SMTP; 20 Aug 2001 15:20:09 -0000
> Message-ID: <GziQfNbo2td4T.4beMQiXQh01nPZsLlQ@mail.>
> From: <>
> Bcc:
> Reply-To:
> Subject: Are you more than $2000.in debt? We can help. (237982)
> Date: Mon, 20 Aug 2001 08:08:39 -0400 (EDT)
> MIME-Version: 1.0
> Content-Type: TEXT/PLAIN; charset="US-ASCII"
> Content-Transfer-Encoding: 7bit
> Are you more than $2000 in DEBT?
> 
> Can anyone help.

I think your setup ist correct.
The problem with the above SPAM ist that the spammer mimics the
SPAM mail as being a bounce message (empty envelope sender).
Thus qmail thinks the recipient is the originator of that "bounce"
and as the user does not exist on your system you get a double bounce.

        \Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
Stress is when you wake up screaming and you realize you haven't fallen
asleep yet.

Reply via email to