Re: [exim] spams rejected at RCPT but still delivered?

Top Page
Delete this message
Reply to this message
Author: Florian Weimer
Date:  
To: Petre Daniel
CC: exim-users
Subject: Re: [exim] spams rejected at RCPT but still delivered?
* Petre Daniel:

>>> 2008-12-09 16:53:51 H=(abbottexcellence.com) [59.25.246.201]
>>> F=<dani@???> rejected RCPT <dani@???>: Forged Sender
>>> address (claims to be local user [dani@???], but isn't
>>> authenticated) 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q <=
>>> mega@??? H=(abbottexcellence.com) [59.25.246.201] P=smtp
>>> S=887 T="Re: Order status" from <mega@???> for dani@???
>>> 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q =>
>>> /home/delfix.ro/dani/Maildir (dani@???) <dani@???>
>>> R=virtual_domains T=virtual_delivery DT=0s 2008-12-09 16:53:55
>>> 1LA3yE-0007Aq-9Q Completed
>>>
>>
>> Looks like two different messages to me (first from <dani@???>
>> and then <mega@???>).
>
> hello, its actually a spam message trying to impersonating me
> (dani@???) which gets caught in my rcpt rule but then delivered to
> the maildir..


Yes, that's the first log line. But the remaining ones refer to a
different message, the one that got through.

-- 
Florian Weimer                <fweimer@???>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99