Re: The famous MichaelG@rxamerica.com
On Fri, Jul 28, 2000 at 08:02:20PM +0200, Einar Bordewich wrote: What is normal action from the list-owner regarding false addresses like the famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. Regards.
Re: The famous MichaelG@rxamerica.com
On Fri, Jul 28, 2000 at 11:26:31AM -0700, [EMAIL PROTECTED] wrote: ! You might want to consider a :deny entry in your tcpserver rules. If you deny them, they will retry. If you allow, but send a 5xx code, they won't (hopefully :-)). 167.234.1.10:allow,RBLSMTPD="-Good mailers don't bounce to header senders" Cheers, ---Chris K. -- Chris, the Young One |_ Never brag about how your machines haven't been Auckland, New Zealand |_ hacked, or your code hasn't been broken. It's http://cloud9.hedgee.com/ |_ guaranteed to bring the wrong kind of PGP: 0xCCC6114E/0x706A6AAD |_ attention. ---Neil Schneider
Re: The famous MichaelG@rxamerica.com
- Original Message - From: [EMAIL PROTECTED] To: "Qmail-mailing list" [EMAIL PROTECTED] Sent: Friday, July 28, 2000 8:26 PM Subject: Re: The famous [EMAIL PROTECTED] On Fri, Jul 28, 2000 at 08:02:20PM +0200, Einar Bordewich wrote: What is normal action from the list-owner regarding false addresses like the famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. -snip- Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: 220 hellriser.bordewich.net ESMTP helo hell2000 250 hellriser.bordewich.net mail from: [EMAIL PROTECTED] 250 ok rcpt to: [EMAIL PROTECTED] 553 sorry, your envelope sender is in my badmailfrom list (#5.7.1) or Chris K. might have a better solution. The result is the same with a 5xx return code. 167.234.1.10:allow,RBLSMTPD="-Good mailers don't bounce to header senders" Return-Path: Delivered-To: [EMAIL PROTECTED] Received: (qmail 30504 invoked by uid 505); 28 Jul 2000 17:09:46 - Received: from by hellriser with scan4virus-0.53 (iscan: v3.1/v5.170-0617/748/20225. uvscan: v4.0.70/v4088. sweep: 1.8/3.33 Beta. hbedv: 6.2.0.3. fsecure: 4.08/2030/2000-07-27/2000-07-28/2000-06-27. . Clean. Processed in 3.069411 secs); 28/07/2000 19:09:42 X-Scan4Virus-Mail-From: via hellriser X-Scan4Virus-Rcpt-To: [EMAIL PROTECTED] X-Scan4Virus: 0.53 (No viruses found. Processed in 3.071213 secs) Received: from unknown (HELO ns.albertsons.com) (167.234.1.10) by hellriser.bordewich.net with SMTP; 28 Jul 2000 17:09:42 - Received: from S7352c.7000.albertsons.com (S7352c.7000.albertsons.com [167.234.12.204]) by ns.albertsons.com (AIX4.3/UCB 8.8.8/8.8.8) with ESMTP id KAA02136 for [EMAIL PROTECTED]; Fri, 28 Jul 2000 10:50:56 -0600 Received: from dubs0001.amstr.com (dubs0001.albertsons.com [162.120.128.9]) by S7352c.7000.albertsons.com (AIX4.3/8.9.3/8.9.3) with ESMTP id KAA65308 for [EMAIL PROTECTED]; Fri, 28 Jul 2000 10:49:06 -0600 X-Internal-ID: 398127291838 Received: from amstr.com (162.120.128.9) by dubs0001.amstr.com (NPlex 2.0.119) for [EMAIL PROTECTED]; Fri, 28 Jul 2000 09:49:08 -0700 Message-ID: [EMAIL PROTECTED] Date: 28 Jul 2000 09:49:08 -0700 From: [EMAIL PROTECTED] Subject: Returned mail: User unknown To: [EMAIL PROTECTED] -- IDG New Media Einar Bordewich Technical Manager Phone: +47 2336 1420 E-Mail: [EMAIL PROTECTED]
Re: The famous MichaelG@rxamerica.com
On Fri, Jul 28, 2000 at 08:02:20PM +0200, Einar Bordewich wrote: What is normal action from the list-owner regarding false addresses like the famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. -snip- Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: YES, I was wrong and YOU where right, and you, you'r always right, right ;-) sorry about that. Chris K. example is now used. regards -- IDG New Media Einar Bordewich Technical Manager Phone: +47 2336 1420 E-Mail: [EMAIL PROTECTED]
Re: The famous MichaelG@rxamerica.com
On Fri, Jul 28, 2000 at 09:03:24PM +0200, Einar Bordewich wrote: On Fri, Jul 28, 2000 at 08:02:20PM +0200, Einar Bordewich wrote: What is normal action from the list-owner regarding false addresses like the famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. -snip- Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: YES, I was wrong and YOU where right, and you, you'r always right, right ;-) Well, hang on a sec here... badmailfrom is checked against the envelope senders address which *is* the Mail From: parameter, which *is* put into the Return-Path: header. qmail-smtpd does *not* look at the From: header at all! I actually don't understand the last post of Einar's as the SMTP transcript doesn't appear to be consistent with the headers in the (assumed) corresponding email. Regards.
RE: The famous MichaelG@rxamerica.com
Title: RE: The famous [EMAIL PROTECTED] Boy - Andy was right when he said everyone can be famous for 15 min. -- I am the Famous [EMAIL PROTECTED] - I must apologize that everyone is getting bounced mail with my address. I have started to migrate off of a legacy email system to qmail. thought i had it working fine - but see the bounced emails. I believe that these started when i tried to send email from legacy system to new qmail system on the rxamerica.com domain. Was originally on the amstr.com domain(american stores), which switched to albertsons.com domain (which i believe is the user of gcs.gateway). I have talked to the original dns admins. to clear up the old dns records so that the MX and A records point to our new dns. but still seem to get bounced email when it goes thru the gcs.gateway(who owns it? i don't know). I am currently working with the albertsons email admins. to try and track where the problem lies. I appreciate your patience and understand your frustration. if anyone has suggestions as to where/who is gcs.gateway so that i may chat or phone them would be greatly appreciated. my humblest apologies, mike garcia -Original Message- From: Einar Bordewich [SMTP:[EMAIL PROTECTED]] Sent: Friday, July 28, 2000 1:03 PM To: Qmail-mailing list Subject: Re: The famous [EMAIL PROTECTED] On Fri, Jul 28, 2000 at 08:02:20PM +0200, Einar Bordewich wrote: What is normal action from the list-owner regarding false addresses like the famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. -snip- Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: YES, I was wrong and YOU where right, and you, you'r always right, right ;-) sorry about that. Chris K. example is now used. regards -- IDG New Media Einar Bordewich Technical Manager Phone: +47 2336 1420 E-Mail: [EMAIL PROTECTED]
Re: The famous MichaelG@rxamerica.com
On Fri, Jul 28, 2000 at 08:50:16PM +0200, Einar Bordewich wrote: famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. -snip- Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: 220 hellriser.bordewich.net ESMTP helo hell2000 250 hellriser.bordewich.net mail from: [EMAIL PROTECTED] 250 ok rcpt to: [EMAIL PROTECTED] 553 sorry, your envelope sender is in my badmailfrom list (#5.7.1) Did you construct this smtp conversation or is it an actual transcript? As I correctly surmised, the offending mail server is indeed sending Mail From: and results in a Return-Path: which means that you cannot put anything useful into badmailfrom to stop it. If you are seeing something different then I suspect that you have some intervening server doing something. And that something is as much an offender as ns.albertsons.com if it replaces an empty envelope sender with [EMAIL PROTECTED]. Regards. or Chris K. might have a better solution. The result is the same with a 5xx return code. 167.234.1.10:allow,RBLSMTPD="-Good mailers don't bounce to header senders" Return-Path: Delivered-To: [EMAIL PROTECTED] Received: (qmail 30504 invoked by uid 505); 28 Jul 2000 17:09:46 - Received: from by hellriser with scan4virus-0.53 (iscan: v3.1/v5.170-0617/748/20225. uvscan: v4.0.70/v4088. sweep: 1.8/3.33 Beta. hbedv: 6.2.0.3. fsecure: 4.08/2030/2000-07-27/2000-07-28/2000-06-27. . Clean. Processed in 3.069411 secs); 28/07/2000 19:09:42 X-Scan4Virus-Mail-From: via hellriser X-Scan4Virus-Rcpt-To: [EMAIL PROTECTED] X-Scan4Virus: 0.53 (No viruses found. Processed in 3.071213 secs) Received: from unknown (HELO ns.albertsons.com) (167.234.1.10) by hellriser.bordewich.net with SMTP; 28 Jul 2000 17:09:42 - Received: from S7352c.7000.albertsons.com (S7352c.7000.albertsons.com [167.234.12.204]) by ns.albertsons.com (AIX4.3/UCB 8.8.8/8.8.8) with ESMTP id KAA02136 for [EMAIL PROTECTED]; Fri, 28 Jul 2000 10:50:56 -0600 Received: from dubs0001.amstr.com (dubs0001.albertsons.com [162.120.128.9]) by S7352c.7000.albertsons.com (AIX4.3/8.9.3/8.9.3) with ESMTP id KAA65308 for [EMAIL PROTECTED]; Fri, 28 Jul 2000 10:49:06 -0600 X-Internal-ID: 398127291838 Received: from amstr.com (162.120.128.9) by dubs0001.amstr.com (NPlex 2.0.119) for [EMAIL PROTECTED]; Fri, 28 Jul 2000 09:49:08 -0700 Message-ID: [EMAIL PROTECTED] Date: 28 Jul 2000 09:49:08 -0700 From: [EMAIL PROTECTED] Subject: Returned mail: User unknown To: [EMAIL PROTECTED] -- IDG New Media Einar Bordewich Technical Manager Phone: +47 2336 1420 E-Mail: [EMAIL PROTECTED]
Re: The famous MichaelG@rxamerica.com
Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: 220 hellriser.bordewich.net ESMTP helo hell2000 250 hellriser.bordewich.net mail from: [EMAIL PROTECTED] 250 ok rcpt to: [EMAIL PROTECTED] 553 sorry, your envelope sender is in my badmailfrom list (#5.7.1) Did you construct this smtp conversation or is it an actual transcript? -snip- Yes, I did construct that smtp conversation based on my first opinion. When I realized that I was wrong ( seconds after I sent the mail), I followed up with a new mail, where I apologized and telling that you where right (and I was wrong). -snip- YES, I was wrong and YOU where right, and you, you'r always right, right ;-) sorry about that. -snip- Thanks for your information and feedback clearing up things. regards -- IDG New Media Einar Bordewich Technical Manager Phone: +47 2336 1420 E-Mail: [EMAIL PROTECTED] - Original Message - From: [EMAIL PROTECTED] To: "Qmail-mailing list" [EMAIL PROTECTED] Sent: Friday, July 28, 2000 11:55 PM Subject: Re: The famous [EMAIL PROTECTED] On Fri, Jul 28, 2000 at 08:50:16PM +0200, Einar Bordewich wrote: famous [EMAIL PROTECTED] ? BTW: It's in my badmailfrom now... Will that help? I though the Mail From: was with these bounces? You might want to consider a :deny entry in your tcpserver rules. -snip- Nope, thats the Return-Path: field The From: field is [EMAIL PROTECTED] , and with that in badmailfrom gives: 220 hellriser.bordewich.net ESMTP helo hell2000 250 hellriser.bordewich.net mail from: [EMAIL PROTECTED] 250 ok rcpt to: [EMAIL PROTECTED] 553 sorry, your envelope sender is in my badmailfrom list (#5.7.1) Did you construct this smtp conversation or is it an actual transcript? As I correctly surmised, the offending mail server is indeed sending Mail From: and results in a Return-Path: which means that you cannot put anything useful into badmailfrom to stop it. If you are seeing something different then I suspect that you have some intervening server doing something. And that something is as much an offender as ns.albertsons.com if it replaces an empty envelope sender with [EMAIL PROTECTED]. Regards. or Chris K. might have a better solution. The result is the same with a 5xx return code. 167.234.1.10:allow,RBLSMTPD="-Good mailers don't bounce to header senders" Return-Path: Delivered-To: [EMAIL PROTECTED] Received: (qmail 30504 invoked by uid 505); 28 Jul 2000 17:09:46 - Received: from by hellriser with scan4virus-0.53 (iscan: v3.1/v5.170-0617/748/20225. uvscan: v4.0.70/v4088. sweep: 1.8/3.33 Beta. hbedv: 6.2.0.3. fsecure: 4.08/2030/2000-07-27/2000-07-28/2000-06-27. . Clean. Processed in 3.069411 secs); 28/07/2000 19:09:42 X-Scan4Virus-Mail-From: via hellriser X-Scan4Virus-Rcpt-To: [EMAIL PROTECTED] X-Scan4Virus: 0.53 (No viruses found. Processed in 3.071213 secs) Received: from unknown (HELO ns.albertsons.com) (167.234.1.10) by hellriser.bordewich.net with SMTP; 28 Jul 2000 17:09:42 - Received: from S7352c.7000.albertsons.com (S7352c.7000.albertsons.com [167.234.12.204]) by ns.albertsons.com (AIX4.3/UCB 8.8.8/8.8.8) with ESMTP id KAA02136 for [EMAIL PROTECTED]; Fri, 28 Jul 2000 10:50:56 -0600 Received: from dubs0001.amstr.com (dubs0001.albertsons.com [162.120.128.9]) by S7352c.7000.albertsons.com (AIX4.3/8.9.3/8.9.3) with ESMTP id KAA65308 for [EMAIL PROTECTED]; Fri, 28 Jul 2000 10:49:06 -0600 X-Internal-ID: 398127291838 Received: from amstr.com (162.120.128.9) by dubs0001.amstr.com (NPlex 2.0.119) for [EMAIL PROTECTED]; Fri, 28 Jul 2000 09:49:08 -0700 Message-ID: [EMAIL PROTECTED] Date: 28 Jul 2000 09:49:08 -0700 From: [EMAIL PROTECTED] Subject: Returned mail: User unknown To: [EMAIL PROTECTED] -- IDG New Media Einar Bordewich Technical Manager Phone: +47 2336 1420 E-Mail: [EMAIL PROTECTED]
