Carlos Laviola <[EMAIL PROTECTED]> writes: > I use TDMA to protect two accounts, [EMAIL PROTECTED] and > [EMAIL PROTECTED] It works fine on root@, but not on dnsmaster@ (it > used to.) This is what I get in the logs for dnsmaster:
I think it's working fine for dnsmaster, too. > Date: Fri Dec 13 12:19:37 BRST 2002 > Sndr: <> > From: Carlos Laviola <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subj: aaa > Actn: CONFIRM action_incoming (1004) > > Date: Fri Dec 13 12:19:37 BRST 2002 > Sndr: <> > From: Carlos Laviola <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subj: aaa > Actn: CONFIRM pending 1039789177.3240.msg (1004) > > Date: Fri Dec 13 12:19:37 BRST 2002 > Sndr: <> > From: Carlos Laviola <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subj: aaa > Actn: NOREPLY (envelope sender = <>) (1004) TMDA only logs the envelope sender if it is different from the From field. For this particular spam, it was different: it was the empty envelope sender which is supposed to be used only for bounce messages. This spammer is abusing that. > And, as you can see, root's logs are different: > > Date: Fri Dec 13 12:27:23 BRST 2002 > From: "Charlie L. A. Vicle" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subj: test > Actn: CONFIRM action_incoming (801) > > Date: Fri Dec 13 12:27:23 BRST 2002 > From: "Charlie L. A. Vicle" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subj: test > Actn: CONFIRM pending 1039789643.5445.msg (801) Here the envelope sender and the From field were the same, so TMDA didn't log the same data twice. Tim _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
