Hi. 503 is the userid of the spamd user. Since the first header indicates the localhost, my guess is that the mail was sent from the postfix machine itself, and not from another machine using it as a relay.
Best regards. Bruno Guerreiro -----Original Message----- From: Gary Funck [mailto:[EMAIL PROTECTED] Sent: Friday, December 12, 2003 4:38 PM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Mysterious SA tags in SPAM message? > > > > Ah. That's what I was starting to think as I typed up my > > original message. > > > > I agree. It seems funny to do a check for SPAM and not do > > any sort of check for open relay. I'm no expert on Received headers, but: Received: from 212.214.136.47 (EHLO smtp-fe2.ballou.se) (212.214.136.47) by mta128.mail.sc5.yahoo.com with SMTP; Thu, 11 Dec 2003 22:14:46 -0800 Received: by smtp-fe2.ballou.se (Postfix, from userid 503) id 5F42490991; Fri, 12 Dec 2003 08:14:28 +0100 (CET) Received: from localhost [127.0.0.1] by smtp-fe2 with SpamAssassin (2.60 1.212-2003-09-23-exp); Fri, 12 Dec 2003 08:14:28 +0100 Isn't that last header saying that the outgoing mail/smtp connection was made from a local machine, using user-id 503? ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
