Re: prevent spam to mismatch address

John Simpson <[email protected]>
Newsgroups gmane.mail.qmail.scanner
Message-ID <[email protected]>
On 2006-12-28, at 0048, [email protected] wrote:
>
> I have qmail+vpopmail
> Users recieve mails that dont address them ("To" field contain  
> different
> emails from local server)
> There are no any forwarders and maillist
> I installed qmail-scanner with SpamAssassin and there was no result
> Can qmail-scanner prevent this or is there any patch?

messaged are delivered to the envelope recipient- the argument to the  
RCPT TO command in the SMTP dialogue.

the "To:", "Cc:", and "Bcc:" headers within the message are almost  
always meaningless in terms of where a message is actually delivered  
to. the only time they have any effect is if you're running a command- 
line program like "sendmail" or "qmail-inject" with the option to  
scan the headers for recipient information.

> I think this is qmail bug is it?

no. it is a common point of confusion for most people who don't deal  
with mail servers on a daily basis, but it's not a bug.

think of it like this- the "To:" header corresponds to the "To:" line  
at the top of a letter. if i write up a letter which says "To: Bill  
Gates, Microsoft" at the top, but then i place that letter inside an  
envelope which has your name and address on it, where is the postal  
service going to deliver the message? that's right- they will deliver  
it to you.

and when you open the letter and see "To: Bill Gates" at the top, it  
might confuse you at first- but then you would look at the envelope  
in which the letter arrived, and you would understand why the postal  
service placed it in your mailbox instead of sending it to microsoft.

and just as you would look at the physical envelope in which the  
message arrived, you can look at the SMTP envelope sender and  
recipient of messages which qmail-local stores in your mailbox. the  
envelope sender (i.e. the MAIL FROM argument) is stored in a "Return- 
Path" header, while the envelope recipient (i.e. the RCPT TO  
parameter, after any "virtualdomains" transformations) will be found  
in a "Delivered-To" header. in addition, qmail-scanner stores a copy  
of the envelope sender in the "Received" header that it creates.

----------------------------------------------------------------
| John M. Simpson    ---   KG4ZOW   ---    Programmer At Large |
| http://www.jms1.net/                         <[email protected]> |
----------------------------------------------------------------
| http://video.google.com/videoplay?docid=-4312730277175242198 |
----------------------------------------------------------------

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
PGP.sig (application/pgp-signature, 186 B) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.