Yes, you are right.
It was [EMAIL PROTECTED]
in my black list filter.
But it was just an example.

The real one is [EMAIL PROTECTED], which is one of the biggest ISP's in Korea.
The point of my question or doubt was
  that my tmda log says [DROP] on 16 Feb,
  but that I still get a bounce-bounced email from MAILER-DAEMON,
  which includes the original email dated 17 Feb.

And more strange is the address of the penetrated email can not be searched
in the tmda log file.

For your reference, I did not delete the last message as shown below.

Thanks,

On Tue, Feb 17, 2004 at 09:00:33AM -0800, David Hoffman wrote:
> Your earlier question was related to using your filter to catch mail
> from [EMAIL PROTECTED]
> 
> I don't see that rule being hit here. But for the first message in your
> note, there was SOME rule in your blacklist that caused this message to
> be dropped.
> 
> But then you are showing a different message below that, that you are
> saying asked for a confirmation. This log clip, and the pieces of the
> second message do not appear to be from the same email.
> 
> 
> 
> 
> 
> --- "YOON. Joo-Yung" <[EMAIL PROTECTED]> wrote:
> > 
> > 
> > My log says:
> > Date: Mon Feb 16 21:28:13 KST 2004
> > Sndr: [EMAIL PROTECTED]
> > From: [EMAIL PROTECTED]
> >   To: [EMAIL PROTECTED]
> >   Subj: about tennis
> >   Actn: DROP (from-file ~/.tmda/lists/blacklist drop)                
> >     (1626)
> > 
> > But the message as shown below is dated 17 Feb, and requested
> > for confirmation, and finally returned as "No such address".
> > 
> > Could anyone give me a hint?
> > 
> > Thanks.
> >   
> > --------------------------------------
> > Return-Path: <[EMAIL PROTECTED]>                                    
> >               
> > Received: (qmail 32621 invoked from network); 17 Feb 2004 12:54:37
> > -0000            
> > Received: from unknown (HELO 61.102.12.143) (210.113.61.28)          
> >               
> >   by 61.102.12.143 with SMTP; 17 Feb 2004 12:54:37 -0000             
> >               
> >   Received: from [145.117.78.125] by 61.102.12.143 with SMTP; Tue, 17
> > Feb 2004        
> >   +18:50:44 +0600                                                    
> >                 
> >   Message-ID: <[EMAIL PROTECTED]>                
> >                 
> >   From: "It is a spam" <[EMAIL PROTECTED]>        
-- 
YOON, Joo-Yung
Korea
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to