On Wed, 8 Feb 2006 07:28:51 -0800 (PST) Ernest Ho <[EMAIL PROTECTED]> wrote:
> It is so strange that I got some spam. Its header does > not has IP address, only localhost. That's impossible If the message comes via SMTP. > We set smtp-auth according to the toaster. Following is the header: > > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 25973 invoked by uid 89); 7 Feb 2006 > 08:44:44 -0000 > Received: by simscan 1.1.0 ppid: 25843, pid: 25952, t: > 1.6100s > scanners: attach: 1.1.0 clamav: > 0.87.1/m:34/d:1183 spam: 3.1.0 > Received: from localhost by mail.conco.com > with SpamAssassin (version 3.1.0); > Tue, 07 Feb 2006 16:44:44 +0800 Very funny, are the above headers complete, unedited? Please check the message source again and post the complete "Received:" headers. Eventually: 1. Do you override SMTP-auth for 127.0.0.1 ? 2. Do you host on that system some form-mailer which can be abused via http? And: 0. Don't resend messages to the list, it's annoying -- Adrian Pircalabu -- This message was scanned for spam and viruses by BitDefender. For more information please visit http://www.bitdefender.com/
