i dont get it.. isnt the same message id?
1. 2008-12-09 16:53:51 H=(abbottexcellence.com) [59.25.246.201]
F=<dani@???> rejected RCPT <dani@???>: Forged Sender
address (claims to be local user [dani@???], but isn't
authenticated)
2. 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q <=
mega@??? H=(abbottexcellence.com) [59.25.246.201] P=smtp
S=887 T="Re: Order status" from <mega@???> for
dani@???
3. 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q =>
/home/delfix.ro/dani/Maildir (dani@???) <dani@???>
R=virtual_domains T=virtual_delivery DT=0s 2008-12-09
16:53:55 1LA3yE-0007Aq-9Q Completed
so you're telling me the "1LA3yE-0007Aq-9Q" id is coincidental ?
> * Petre Daniel:
>
>>>> 2008-12-09 16:53:51 H=(abbottexcellence.com) [59.25.246.201]
>>>> F=<dani@???> rejected RCPT <dani@???>: Forged Sender
>>>> address (claims to be local user [dani@???], but isn't
>>>> authenticated) 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q <=
>>>> mega@??? H=(abbottexcellence.com) [59.25.246.201] P=smtp
>>>> S=887 T="Re: Order status" from <mega@???> for
>>>> dani@??? 2008-12-09 16:53:55 1LA3yE-0007Aq-9Q =>
>>>> /home/delfix.ro/dani/Maildir (dani@???) <dani@???>
>>>> R=virtual_domains T=virtual_delivery DT=0s 2008-12-09
>>>> 16:53:55 1LA3yE-0007Aq-9Q Completed
>>>>
>>>>
>>> Looks like two different messages to me (first from
>>> <dani@???> and then <mega@???>).
>>>
>>
>> hello, its actually a spam message trying to impersonating me
>> (dani@???) which gets caught in my rcpt rule but then
>> delivered to the maildir..
>>
>
> Yes, that's the first log line. But the remaining ones refer to a
> different message, the one that got through.
------------------------------
http://www.textdrive.ro
email: office@???
TextDrive, cel mai simplu serviciu de gazduire:
* 10 conturi de mail per domeniu fara limita de spatiu
* 10 Gbytes spatiu de htdocs (php,gd,imagick,ffmpeg)
* 1 baza de date mysql cu spatiu nelimitat de inregistrari
* acces SSL la e-mail, ftp, pop3/imap si phpmyadmin
---------------------------------------------------------------------
