Re: Weird empty messages

2015-05-08 Thread Bill Cole
On 8 May 2015, at 11:46, Dianne Skoll wrote: Hi, We are seeing a trickle of weird empty messages. Here's a sample Sendmail log: May 8 11:33:31 colo3 sm-mta[1100]: t48FXPqL001100: from=, size=18, class=0, nrcpts=1, msgid=<8[10, proto=SMTP, daemon=MTA, relay=50-2

Re: Weird empty messages

2015-05-08 Thread Axb
Massively broken ratware, safely rejectable with a MTA header rule detecting /^Message-ID: \<\d\[\d/ On 08.05.2015 17:46, Dianne Skoll wrote: Hi, We are seeing a trickle of weird empty messages. Here's a sample Sendmail log: May 8 11:33:31 colo3 sm-mta[1100]: t48FXPqL001100: fro

Re: Weird empty messages

2015-05-08 Thread Dianne Skoll
On Fri, 08 May 2015 13:14:56 -0400 "Kevin A. McGrail" wrote: > Haven't seen any get through our spam filters, though and they > typically score really high (40+). Yes, none have got through for us either... all scoring at least 15 or so. I'm just trying to figure out the motivation behind them (

Re: Weird empty messages

2015-05-08 Thread Kevin A. McGrail
On 5/8/2015 11:46 AM, Dianne Skoll wrote: $ fgrep -c 'size=18,' /var/log/mail-daily/current.log We have apparently seen these for 54 days. Here's the first: Mar 17 05:12:00 intel1 sendmail[21710]: t2H9Bt6J021710: from=, size=18, class=0, nrcpts=3, msgid=<5[10, proto=SMTP, daemon=MTA, relay=ip

Weird empty messages

2015-05-08 Thread Dianne Skoll
Hi, We are seeing a trickle of weird empty messages. Here's a sample Sendmail log: May 8 11:33:31 colo3 sm-mta[1100]: t48FXPqL001100: from=, size=18, class=0, nrcpts=1, msgid=<8[10, proto=SMTP, daemon=MTA, relay=50-242-22-73-static.hfc.comcastbusiness.net [50.242.22.73] (may be forge