Jeremy Kister wrote:

Upon examining the original message that my MTA bounced, I know this is not
a coincidence.

I trimmed the original message because I thought it was non-relevant, but it
clearly is.

something in the original message confused some part of my MTA; This _is_ a
bug; im just not sure if it's qmail or vpopmail

below is the original email message that my system bounced due to "message
is looping"

Tom!? Ken!? :)

Jeremy Kister
www.jeremykister.com/jeremy


Return-Path: <[EMAIL PROTECTED]> Received: (qmail 25209 invoked by uid 1010); 7 Oct 2003 08:13:55 -0000 Received: from unknown (HELO ns1.inter7.com) (209.218.8.2) by max.nntx.net with SMTP; 7 Oct 2003 08:13:55 -0000 Received: (qmail 27027 invoked by uid 511); 7 Oct 2003 09:27:02 -0000 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Post: <mailto:[EMAIL PROTECTED]> List-Help: <mailto:[EMAIL PROTECTED]> List-Unsubscribe: <mailto:[EMAIL PROTECTED]> List-Subscribe: <mailto:[EMAIL PROTECTED]> Delivered-To: mailing list [EMAIL PROTECTED] Received: from unknown (HELO rous.redbarn.org) (204.152.188.41) by evanston.inter7.com with SMTP; 7 Oct 2003 09:27:01 -0000 To: [EMAIL PROTECTED] From: [EMAIL PROTECTED] (Eric Ziegast) In-reply-to: Your message of "Tue, 07 Oct 2003 00:55:40 PDT." <[EMAIL PROTECTED]> Date: Tue, 07 Oct 2003 01:12:40 -0700 Sender: [EMAIL PROTECTED] Message-Id: <[EMAIL PROTECTED]> Subject: Re: [vchkpw] unexpected Delivered-To



How can this happen?


*Any* header can be forged. :^)


Ok, but I'm not clear on one thing. qmail+vpopmail is going to route
locally based on the to field of the incoming message, right? So you are
saying this message was forged locally, meaning a hacked server?


The envelope recipient ("RCPT TO:") is what qmail mostly cares about.
The normal message headers are fluffy bits of superfluous information
that could help it detect a mail loop.
Your message appears to have had a "To:" header of "[EMAIL PROTECTED]"
(forged) and an envelope recipient of "[EMAIL PROTECTED]" (not forged)
or maybe even some other address that aliases itself to kurt.


Curiously your off-list reply cased my server to generate this message:
message is looping /var/vpopmail/domains/breathsense.com/kkb/Maildir/


Why would your server bounce it in the first place? Fix that!
--
Eric Ziegast
[EMAIL PROTECTED]
(aka [EMAIL PROTECTED])
(aka [EMAIL PROTECTED])





The envelope recipient ("RCPT TO:") is what qmail mostly cares about. The normal message headers are fluffy bits of superfluous information that could help it detect a mail loop. Your message appears to have had a "To:" header of "[EMAIL PROTECTED]" (forged) and an envelope recipient of "[EMAIL PROTECTED]" (not forged)

Test.
or maybe even some other address that aliases itself to kurt.






Reply via email to