Re: Return Delivery of Mail I've never Sent

2004-05-12 Thread Viktor Lazlo
On Wed, 12 May 2004, Bob Perry wrote:

> Just setup mutt and I've begun to notice mail return to me
> indicating that it did not pass the server content filter,
> etc.  The last one stated that a virus was found, file name
> disco.zip, virus name W32/[EMAIL PROTECTED] and apprarently
> was found by McAfee Scanning Engine (4359/4.3.20).  What
> makes it worse is that the recipient is not recognizable.
>
> I understand that my system can be used as a mail relay and
> would like to know how to combat this.  Can anyone point me
> in the right direction so that I can quickly resolve this
> issue?

If the bounced email contains headers check to see if it originates from
your IP--most likely it is spoofing the return address.

Cheers,

Viktor
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Return Delivery of Mail I've never Sent

2004-05-12 Thread Dan Nelson
In the last episode (May 12), Bob Perry said:
> Just setup mutt and I've begun to notice mail return to me indicating
> that it did not pass the server content filter, etc.  The last one
> stated that a virus was found, file name disco.zip, virus name
> W32/[EMAIL PROTECTED] and apprarently was found by McAfee Scanning
> Engine (4359/4.3.20).  What makes it worse is that the recipient is
> not recognizable.
> 
> I understand that my system can be used as a mail relay and would
> like to know how to combat this.  Can anyone point me in the right
> direction so that I can quickly resolve this issue?

Most likely the original email never touched your system.  A virus that
selects random sender and recipients from the infected machine's
addressbook sent a message to another system with a misconfigured virus
scanner that attempted to notify the sender that they're infected (even
though viruses have been forging the sender address for years).

-- 
Dan Nelson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Return Delivery of Mail I've never Sent

2004-05-12 Thread Kris Kennaway
On Wed, May 12, 2004 at 11:00:52PM -0400, Bob Perry wrote:
> Just setup mutt and I've begun to notice mail return to me 
> indicating that it did not pass the server content filter, 
> etc.  The last one stated that a virus was found, file name 
> disco.zip, virus name W32/[EMAIL PROTECTED] and apprarently 
> was found by McAfee Scanning Engine (4359/4.3.20).  What 
> makes it worse is that the recipient is not recognizable.
> 
> I understand that my system can be used as a mail relay and 
> would like to know how to combat this.  Can anyone point me 
> in the right direction so that I can quickly resolve this 
> issue?

Welcome to the 21st century internet. Forged emails from viruses are
routine, and misconfigured email systems that complain to the forged
sender address are common.  Either complain to the administrators of
the system that send you the bogus reply or just learn to ignore them.

Kris


pgp0.pgp
Description: PGP signature


Return Delivery of Mail I've never Sent

2004-05-12 Thread Bob Perry
Just setup mutt and I've begun to notice mail return to me 
indicating that it did not pass the server content filter, 
etc.  The last one stated that a virus was found, file name 
disco.zip, virus name W32/[EMAIL PROTECTED] and apprarently 
was found by McAfee Scanning Engine (4359/4.3.20).  What 
makes it worse is that the recipient is not recognizable.

I understand that my system can be used as a mail relay and 
would like to know how to combat this.  Can anyone point me 
in the right direction so that I can quickly resolve this 
issue?

Thanks,
Bob Perry

-- 
I've learned that whatever hits the fan will not be evenly
distributed.

FreeBSD 4.9-RELEASE-p2 #0
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"