Hi gang!
I'm getting many messages sent to my work address from my xmail server =
that have me confused. I've posted the text of the message below. Here =
is a snipet of my smtp log(I know the e-mail addresses don't match, but =
I've got hundreds of these in the log)
"" "pmnhg.net" "10.5.10.90" "2004-02-03 10:31:53" "MAIL2" =
"fv.org" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "S9B8" "RECV=3DOK"=
"" "1754" ""
Now, 10.5.10.90 is my actual xmail server. The users that are being sent =
to don't exist. Funny part is that they're all being sent to fv.org which =
is a custom domain on the server (this server is a backup server for =
fv.org)
My work machine (the only one that I know of with [EMAIL PROTECTED] in =
it) isn't infected (we use GroupWise (please, no laughter)). I've scanned =
for virii and no dice. I ran the novarg removal tool, no dice
Any way to find out exactly where this is coming from? Is it possible =
that the server is generating these?
SPECS:
RH 8.0
XMAIL 1.17
CLAMAV
Any ideas???
Here's one of the messages in question, names have been somewhat changed =
to protect the innocent.
[<00>] XMail bounce: [EMAIL PROTECTED];Error=3D[550 Mailbox unavailable =
<[EMAIL PROTECTED]>]
[<01>] Error sending message [1075825384008.221211.MAIL2] from [pmnhg.net].=
ID: <S9B4>
Mail From: <[EMAIL PROTECTED]>
Rcpt To: <[EMAIL PROTECTED]>
Server: <mail.fvgsc.org> [66.147.129.196]
[<02>] The reason of the delivery failure was:
550 Mailbox unavailable <[EMAIL PROTECTED]>
[<05>] Here is listed the initial part of the message:
X-AV-Scanned: yes 41265f7864db6bb05fd1044325fd2b9c
Received: from MAIL2 (10.5.10.90:32905)
by pmnhg.net with [XMail 1.17 (Linux/Ix86) ESMTP Server]
id <S9B4> for <[EMAIL PROTECTED]> from <[EMAIL PROTECTED]>;
Tue, 3 Feb 2004 10:23:03 -0600
Subject: ! WARNING ! - Virus found in email
Mime-Version: 1.0
Content-Type: text/plain; charset=3D"iso-8859-1"
X-Mailer: AV-Filter 1.9
To: [EMAIL PROTECTED]
Content-Transfer-Encoding: quoted-printable
Date: Tue, 3 Feb 2004 10:23:03 -0600
From: [EMAIL PROTECTED]
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
