* Petre Daniel:
>>> 2008-12-09 16:53:51 H=(abbottexcellence.com) [59.25.246.201]
>>> F=<dani@???> rejected RCPT <dani@???>: Forged Sender
>>> address (claims to be local user [dani@???], but isn't
>>> authenticated) 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q <=
>>> mega@??? H=(abbottexcellence.com) [59.25.246.201] P=smtp
>>> S=887 T="Re: Order status" from <mega@???> for dani@???
>>> 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q =>
>>> /home/delfix.ro/dani/Maildir (dani@???) <dani@???>
>>> R=virtual_domains T=virtual_delivery DT=0s 2008-12-09 16:53:55
>>> 1LA3yE-0007Aq-9Q Completed
>>>
>>
>> Looks like two different messages to me (first from <dani@???>
>> and then <mega@???>).
>
> hello, its actually a spam message trying to impersonating me
> (dani@???) which gets caught in my rcpt rule but then delivered to
> the maildir..
Yes, that's the first log line. But the remaining ones refer to a
different message, the one that got through.
--
Florian Weimer <fweimer@???>
BFK edv-consulting GmbH http://www.bfk.de/
Kriegsstraße 100 tel: +49-721-96201-1
D-76133 Karlsruhe fax: +49-721-96201-99