Are you seeing any timeout errors in your logs?  You could also try 
enabling full logging (with "full-log-dir") to see what's really 
happening during these deliveries.

-- Sam Clippinger

Ken Schweigert wrote:
> My customers have been getting quite a few of these, and I've even
> gotten a couple.  There is no body to the message and very little
> email headers.  Here is the complete message with headers:
> 
> ####################################################
> [EMAIL PROTECTED] cur]# more 1205279212.29045.mail.myserver.tld\,S\=840\:2\,S
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 29043 invoked by uid 89); 11 Mar 2008 23:46:52 -0000
> Received: by simscan 1.1.0 ppid: 29038, pid: 29040, t: 0.0610s
>          scanners: attach: 1.1.0 clamav: 0.88.2/m:38/d:1464
> Received: from unknown (HELO ns3.byte-productions.com) (63.149.22.68)
>   by 0 with SMTP; 11 Mar 2008 23:46:52 -0000
> Received-SPF: softfail (0: transitioning SPF record at
> offers-by-email.us does not designate 63.149.22.68 as permitted
> sender)
> Received: (qmail 28475 invoked by uid 89); 11 Mar 2008 23:46:51 -0000
> Received: by simscan 1.3.1 ppid: 28130, pid: 28132, t: 180.8884s
>          scanners: attach: 1.3.1 clamav: 0.90.2/m:
> Received: from unknown (HELO mail.offers-by-email.us) (64.187.124.242)
>   by 0 with SMTP; 11 Mar 2008 23:43:50 -0000
> Received-SPF: pass (0: SPF record at offers-by-email.us designates
> 64.187.124.242 as permitted sender)
> [EMAIL PROTECTED] cur]#
> ####################################################
> 
> I sanitized some data above, but this is the contents of the message
> from the file in her Maildir/cur/ directory.  Heck, I didn't even
> think you could send a message without a To: or a From:.
> 
> Here is the log entry from the smtpd logs so I know it is coming in
> off of the network and not some local delivery:
> 
> ####################################################
> 2008-03-11 17:45:06.486224500 CHKUSER accepted rcpt: from
> <[EMAIL PROTECTED]::> remote
> <ns3.byte-productions.com:unknown:63.149.22.68> rcpt
> <[EMAIL PROTECTED]> : found existing recipient
> 2008-03-11 17:45:06.486338500 ALLOWED from: [EMAIL PROTECTED]
> to: [EMAIL PROTECTED] origin_ip: 63.149.22.68 origin_rdns:
> ns3.byte-productions.com auth: (unknown)
> ####################################################
> 
> Aside from the confusion in my head on how it was even delivered, is
> there a way with SpamDyke to not accept a message if there isn't a
>>From header or a To header and possibly a blank body?
> 
> Thanks!
> -ken
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

Reply via email to