Date: Sun Feb 1 00:21:11 EST 2004
From: "" <[EMAIL PROTECTED]>
Rept: "" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subj: Re:are you fat bdkruud ray ri v
Actn: CONFIRM pending 1075612871.84850.msg (1829)
I thought this log entry indicated another mail from the spammer. The confirmation mail of pending message 1075612871.84850.msg
The fact that "Actn" is "CONFIRM pending ..." means that TMDA is putting the message into the pending queue. Also, the "To" address is not a tagged address.
If this is the only part of the log referring to "[EMAIL PROTECTED]" then it is a mis-configured bounce + a joe-job that let the spam in. You can still inform the admins at spammer.com that they are not adhering to RFC 2821 (sections 3, 7, 4.4, and 6.1 among others).
You can test this if you like - Just send a test message to "[EMAIL PROTECTED]" with three different keyword (or not-protected) addresses (one in the From, one in the Reply-to, one in the envelope) and see which one gets the bounce. If it's not te envelope one, their MTA is wrong.
-- Jim Ramsay "Me fail English? That's unpossible!"
_____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
