I figured it out, and it is strange: The forward was to a [EMAIL PROTECTED] and the domain no longer exist on Imail, also the MX is still pointing to the Imail box.. Why would that create a loop ?
----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, June 05, 2004 12:15 PM Subject: Re: [Declude.JunkMail] Loop ? > > >Can someone take a look at the folowing header and let me know why it > >seems looping thru my server ? > > > >Received: from mail.cefib.com [208.154.200.6] by mail.cefib.com with ESMTP > > (SMTPD32-8.05) id A8DEF3E0054; Wed, 02 Jun 2004 00:01:34 +0000 > >Received: from mail.cefib.com [208.154.200.6] by mail.cefib.com with ESMTP > > (SMTPD32-8.05) id A8DBBE201DC; Wed, 02 Jun 2004 00:01:31 +0000 > >Received: from mail.cefib.com [208.154.200.6] by mail.cefib.com with ESMTP > > (SMTPD32-8.05) id A8D7F3A0054; Wed, 02 Jun 2004 00:01:27 +0000 > >Received: from mail.cefib.com [208.154.200.6] by mail.cefib.com with ESMTP > > (SMTPD32-8.05) id A8D3F370054; Wed, 02 Jun 2004 00:01:23 +0000 > >Received: from SMTP32-FWD by mail.cefib.com > > (SMTP32) id A07CC3FBB; Wed, 2 Jun 2004 00:01:23 +0000 > >Received: from pcp08383224pcs.elkton01.md.comcast.net [69.138.69.252] by > >mail.cefib.com > > (SMTPD32-8.05) id A8A9BDE01DC; Wed, 02 Jun 2004 00:00:41 +0000 > > The last Received: header is the one IMail originally added, and the one > above it has "SMTP32-FWD", which means that the account it was sent to > forwarded the E-mail somewhere else -- and that's where the loop started. > > So I would check the IMail SMTP log file entries for this E-mail to see who > it was originally sent to. Then, check who they forward their E-mail to, > and you'll probably see the problem. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.