Re: ssl with dslextreme.com attempts to send a spurious email

On 20190427 03:24:33, Ralph Corderoy wrote:
> Hi Joanne,
> 
> Copying back in the list, and quoting verbosely...
> 
>>> I think it would be worthing checking in Centos's package-upgrade
>>> log to see what packages upgraded around 2019-Apr-04 when the
>>> symptom appeared.
>>
>> I started to do that but checked back in logs first. The issue
>> happened intermittently well before it went bad. Clamav was updated on
>> that date. It is used in the spamassassin processing using spamd. So
>> if it was a spamassassin thing spamd would be opening the port or
>> procmail would be opening the port.  Auditd showed it was fetchmail
>> that opened the port.
> 
> I don't think that's true.  I think Clamav/Spamassassin can feed back
> the status to fetchmail that then sends the bounce.

I do have bounces disabled with spamassassin. This is happening on the order of 
900 times a day. I poll fetchmail once a minute, 1440 times a day. I do not get 
900 mails a day. I get on the order of 200 spams a day and about 50 non-spams a 
day. So the numbers do not align.

I consider bounce emails to be exceptionally evil after being stuck on the 
"Bounce" end of several joe jobs before people became aware of the problem.

{^_^}