Hi folks, I've a problem. My domain hasn't a catchall account (with qmailadmin I've used the option bounce all), but this morning I've received an email like that:
Received: (qmail 16116 invoked from network); 2 Feb 2004 07:59:14 -0000 Received: from adsl-62-123-116-229.dial.atlanet.it (HELO JERICOMASTER.it) (62.123.116.229) by 0 with SMTP; 2 Feb 2004 07:59:14 -0000 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: ups, i've got your mail Importance: Normal X-Mailer: Microsoft Outlook Express 4.72.3612.1700 X-MSMail-Priority: Normal MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="JERICOMASTERd6b4f0dded.2672" This is a multi-part message in MIME format. Well, 62.123.116.229 is a dialup enabled to use smtp relay with pop3-before-smtp. The email above is a worm. That is, my qmail-scanner in tcp.smtp hasn't checked the email, probably because there's nothing that says "the tcp.smtp rules have precedence instead of open-smtp". I haven't an [EMAIL PROTECTED] or [EMAIL PROTECTED] account. That's a problem. Have you got any idea to solve it? My tcp.smtp: # No Qmail-Scanner at all for mail from 127.0.0.1 127.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue " # Use Qmail-Scanner without SpamAssassin on any mail from the LAN 192.168.:allow,RELAYCLIENT="",RBLSMTPD="",TCPREMOTEIP="Protected",QMAILQUEUE ="/var/qmail/bin/qmail-queue" # Use Qmail-Scanner with SpamAssassin on any mail from the rest of the world :allow,DENYMAIL="DNSCHECK",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl " Thanks for all Regards Andrea
