I tried to find one of the messages in the logs. It's damn hard to find it since it's really weird... and it all makes no sense to me. I think this email source belongs to the logs below ( added <!-- --> to prevent potential damage due to fudged HTML ).
email source:
>>>>>
>>>>>
From - Thu Dec 11 02:09:06 2008
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from 99-206-220-166.pools.spcsdns.net
(99-206-220-166.pools.spcsdns.net [99.206.220.166])
by rptd.ch (Postfix) with SMTP id D824468297
for <[EMAIL PROTECTED]>; Wed, 10 Dec 2008 18:03:42 +0100 (CET)
To: <[EMAIL PROTECTED]>
Subject: Delivery Status Notification (Failure)
From: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <[EMAIL PROTECTED]>
Date: Wed, 10 Dec 2008 18:03:42 +0100 (CET)
<!--
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://resolutionor.com/"; target="_blank">
<img src="http://resolutionor.com/adv4.jpg"; border=0 alt="Having trouble
viewing this email?
Click here to view as a webpage."></a></BODY></HTML>
-->
<<<<<
<<<<<
the logs ( **** is an email address from my network, a legit one ).
>>>>>
>>>>>
Dec 10 18:03:41 [postfix/smtpd] initializing the server-side TLS engine
Dec 10 18:03:41 [postfix/smtpd] connect from
99-206-220-166.pools.spcsdns.net[99.206.220.166]
Dec 10 18:03:42 [postfix/smtpd] warning: restriction
`reject_authenticated_sender_login_mismatch' ignored: no SASL support
Dec 10 18:03:42 [postfix/smtpd] warning: restriction
`reject_unauthenticated_sender_login_mismatch' ignored: no SASL support
- Last output repeated twice -
Dec 10 18:03:42 [postfix/smtpd] D824468297:
client=99-206-220-166.pools.spcsdns.net[99.206.220.166]
Dec 10 18:03:43 [postfix/smtpd] connect from
mail.hudfic.com.vn[210.245.86.14]
Dec 10 18:03:44 [postfix/cleanup] D824468297:
message-id=<[EMAIL PROTECTED]>
Dec 10 18:03:44 [postfix/qmgr] D824468297: from=<[EMAIL PROTECTED]>,
size=827, nrcpt=1 (queue active)
Dec 10 18:03:44 [postfix/smtpd] NOQUEUE: reject: RCPT from
mail.hudfic.com.vn[210.245.86.14]: 450 4.7.1 <cp-mail1.hosting.hn.fpt.vn
>: Helo command rejected: Host not found;
from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> proto=ESMTP
helo=<cp-mail1.hosting.
hn.fpt.vn>
Dec 10 18:03:44 [postfix/virtual] D824468297: to=<[EMAIL PROTECTED]>,
relay=virtual, delay=2, delays=2/0/0/0.03, dsn=2.0.0, status=sen
t (delivered to maildir)
Dec 10 18:03:44 [postfix/qmgr] D824468297: removed
Dec 10 18:03:44 [postfix/smtpd] disconnect from
99-206-220-166.pools.spcsdns.net[99.206.220.166]
Dec 10 18:03:44 [postfix/smtpd] disconnect from
mail.hudfic.com.vn[210.245.86.14]
<<<<<<
<<<<<<
What is strange is that it looks like they send a fudged mail and the
mail triggers a postmaster-mail ( which is redirected to [EMAIL PROTECTED]
). But why should it do this? It should only trigger one if you send a
mail to somebody else and there an error happens. I know the person
owning this email and she never used paypal at all so she also never
send a mail there for sure.
DJ Lucas wrote:
> Roland Plüss wrote:
>> ** Sorry, send to the previous poster instead of the list...
>> ** I'm not a fan of mailing lists because of things
>> ** like this U.=.U
>>
>> No idea which log snippets you want to see
> A complete log of a message that got through that shouldn't have, from
> connect to delivery would be helpful. Still in a bit of a
> rush...check back later.
>
> -- DJ Lucas
>
>
>
--
Yours sincerely
Plüss Roland
Leader and Head Programmer
- Game: Epsylon ( http://epsylon.rptd.ch/ ,
http://www.moddb.com/games/4057/epsylon )
- Game Engine: Drag(en)gine ( http://dragengine.rptd.ch ,
http://www.moddb.com/engines/9/dragengine )
- Normal Map Generator: DENormGen ( http://epsylon.rptd.ch/denormgen.php )
signature.asc
Description: OpenPGP digital signature
![http://resolutionor.com/adv4.jpg"](http://resolutionor.com/adv4.jpg"){kind=link}