Howdy, y'all:
I am using the latest q-mail scanner/clamav/spam assassin pkg (the latest atomicrocketturtles.com pkg) on rh9.0 and PLESK 6.0. Prior to installing the pkg, my headers for my e-newsletter (PERL based newsletter script) were kosher -- meaning that q-mail showed the correct sender e-mail address ([EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>). Due to the outcry against SPAM, I have had to get bonded to send out the letter; I use Habeas x-header haiku. Habeas approved the headers; the headers were in order. Due to a huge attack of virus-laden SPAM on my server, I then installed the forementioned package. Now the newsletter header path says the origination is from "Return-path [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>" "Received: (qmail 3641 invoked by uid 2520); Thu, 06 May 2004 23:53:30 +0000 Received: from [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> by air360.startdedicated.com by uid 48 with qmail-scanner-1.20st" It's supposed to be from [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>. Very strange. Now I can't send out the letter because of the anonymous header sender change. Atomicrocketturtle replied with a "that's bizarre, go check with the qmail-scanner mailing list" and, thus, here I am. I understand why qmail-scanner would do this -- after all, the PERL script is not a bonafide MUA. I've studied my mail logs and seen the onslaught of digital deceit that qmail-scanner has protected the server from -- I refuse to live without it. I didn't have much success searching on this topic, so if this has already been addressed, please let me know where I can find it. I thank y'all in advance for your time and assistance.
Qmail Scanner *absolutely* does not change the headers. Ever.
Q-S-1.20st isn't a "pure" Qmail-Scanner - it's a patched version - but I seriously doubt the author of that patch got it wrong either.
Something else on your system is fiddling with the header. In fact, it smells of qmail-inject being called incorrectly - and Q-S doesn't use qmail-inject for processing mail.
-- Cheers
Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
