My customers have been getting quite a few of these, and I've even
gotten a couple. There is no body to the message and very little
email headers. Here is the complete message with headers:
####################################################
[EMAIL PROTECTED] cur]# more 1205279212.29045.mail.myserver.tld\,S\=840\:2\,S
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 29043 invoked by uid 89); 11 Mar 2008 23:46:52 -0000
Received: by simscan 1.1.0 ppid: 29038, pid: 29040, t: 0.0610s
scanners: attach: 1.1.0 clamav: 0.88.2/m:38/d:1464
Received: from unknown (HELO ns3.byte-productions.com) (63.149.22.68)
by 0 with SMTP; 11 Mar 2008 23:46:52 -0000
Received-SPF: softfail (0: transitioning SPF record at
offers-by-email.us does not designate 63.149.22.68 as permitted
sender)
Received: (qmail 28475 invoked by uid 89); 11 Mar 2008 23:46:51 -0000
Received: by simscan 1.3.1 ppid: 28130, pid: 28132, t: 180.8884s
scanners: attach: 1.3.1 clamav: 0.90.2/m:
Received: from unknown (HELO mail.offers-by-email.us) (64.187.124.242)
by 0 with SMTP; 11 Mar 2008 23:43:50 -0000
Received-SPF: pass (0: SPF record at offers-by-email.us designates
64.187.124.242 as permitted sender)
[EMAIL PROTECTED] cur]#
####################################################
I sanitized some data above, but this is the contents of the message
from the file in her Maildir/cur/ directory. Heck, I didn't even
think you could send a message without a To: or a From:.
Here is the log entry from the smtpd logs so I know it is coming in
off of the network and not some local delivery:
####################################################
2008-03-11 17:45:06.486224500 CHKUSER accepted rcpt: from
<[EMAIL PROTECTED]::> remote
<ns3.byte-productions.com:unknown:63.149.22.68> rcpt
<[EMAIL PROTECTED]> : found existing recipient
2008-03-11 17:45:06.486338500 ALLOWED from: [EMAIL PROTECTED]
to: [EMAIL PROTECTED] origin_ip: 63.149.22.68 origin_rdns:
ns3.byte-productions.com auth: (unknown)
####################################################
Aside from the confusion in my head on how it was even delivered, is
there a way with SpamDyke to not accept a message if there isn't a
>From header or a To header and possibly a blank body?
Thanks!
-ken
--
Have a nice day ... unless you've made other plans.
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
