Re: Re: chkuser - rejects legit mail, when followed by bad e-mail
"U. George" <[email protected]>
| Newsgroups | gmane.mail.vpopmail,gmane.spam.detected |
|---|---|
| Message-ID | <[email protected]> |
It was not clear to me if chkuser should allow a legit e-mail addr, followed by some bad e-mail addr to be passed along smtpd. Following is a recordio session of one smtp session where there are 3 rcpt to. 2 are bogus, 1 is real. Message is spam. > > > > Oct 11 12:27:04 LaptopServer qmail: 12:27:04.608 sslserver: status: 1/14 > Oct 11 12:27:04 LaptopServer qmail: 12:27:04.609 sslserver: pid 5043 from 200.12.39.251 > Oct 11 12:27:04 LaptopServer qmail: 12:27:04.730 sslserver: ok 5043 mail.gatworks.com:96.232.60.244:25 ip-39-251.guate.net.gt:200.12.39.251::2372 > Oct 11 12:27:04 LaptopServer qmail: 12:27:04.770 5043 > 220 mail.gatworks.com ESMTP? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.485 5043 < EHLO nnvwpohu? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.485 5043 > 250-mail.gatworks.com? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.485 5043 > 250-STARTTLS? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.485 5043 > 250-AUTH LOGIN CRAM-MD5 PLAIN? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.485 5043 > 250-AUTH=LOGIN CRAM-MD5 PLAIN? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.486 5043 > 250-PIPELINING? > Oct 11 12:27:14 LaptopServer qmail: 12:27:14.486 5043 > 250 8BITMIME? > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.348 5043 < MAIL FROM: <[email protected]>? > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.348 5043 < RCPT TO: <[email protected]>? > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.349 5043 < RCPT TO: <[email protected]>? > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.349 5043 < RCPT TO: <[email protected]>? > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.349 5043 < DATA? > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.349 CHKUSER accepted sender: from <[email protected]::> remote <nnvwpohu:ip-39-251.guate.net.gt:200.12.39.251> rcpt <> : sender accepted > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.349 CHKUSER accepted rcpt: from <[email protected]::> remote <nnvwpohu:ip-39-251.guate.net.gt:200.12.39.251> rcpt <[email protected]> : found existing recipient > Oct 11 12:27:15 LaptopServer qmail: 12:27:15.350 CHKUSER rejected rcpt: from <[email protected]::> remote <nnvwpohu:ip-39-251.guate.net.gt:200.12.39.251> rcpt <[email protected]> : not existing recipient > Oct 11 12:27:16 LaptopServer qmail: 12:27:16.355 CHKUSER rejected rcpt: from <[email protected]::> remote <nnvwpohu:ip-39-251.guate.net.gt:200.12.39.251> rcpt <[email protected]> : not existing recipient > Oct 11 12:27:17 LaptopServer qmail: 12:27:17.667 5043 > 250 ok? > Oct 11 12:27:17 LaptopServer qmail: 12:27:17.667 5043 > 250 ok? > Oct 11 12:27:17 LaptopServer qmail: 12:27:17.667 5043 > 550 5.1.1 sorry, no mailbox here by that name (chkuser)? > Oct 11 12:27:17 LaptopServer qmail: 12:27:17.667 5043 > 550 5.1.1 sorry, no mailbox here by that name (chkuser)? > Oct 11 12:27:17 LaptopServer qmail: 12:27:17.668 5043 > 354 go ahead? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.718 5043 < Reply-To: "Tammara Carman" <[email protected]>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.720 5043 < From: "Tammara Carman" <[email protected]>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.720 5043 < Sender: <[email protected]>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.720 5043 < X-Sender: <[email protected]>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.720 5043 < MIME-Version: 1.0? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.721 5043 < To: <[email protected]>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.721 5043 < In-Reply-To: <53c301cb6742$eca589a1$15fb8d87@r4o15ag>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.721 5043 < Message-ID: <[email protected]>? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.721 5043 < Subject: HugeDiscountWatches, RolexA (Datejust/Sport), Bell & Ross, LV & Gucci Bags 5r? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.721 5043 < Date: Mon, 11 Oct 2010 10:23:25 -0700? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.722 5043 < Content-Type: multipart/alt+ > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.722 5043 < ernative;? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.722 5043 < ?boundary="----=_Part_50637_020A_EFC30E91.F8D369B8"? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.722 5043 < User-Agent: Mozilla/5.035 (X11; U; solaris; U; NT4.0; en-us) Gecko/25250101? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.722 5043 < X-Accept-Language: en? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.723 5043 < ? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.723 5043 < ? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.723 5043 < ------=_Part_50637_020A_EFC30E91.F8D369B8? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.723 5043 < Content-Type: text/plain; charset=us-ascii? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.724 5043 < C+ > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.724 5043 < ontent-Transfer-Encoding: 8bit? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.724 5043 < ? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.724 5043 < > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.724 5043 < Get Up to 75% OFF at Online WatchesStore > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.725 5043 < Discount Watches for All Famous Brands > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.725 5043 < > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.725 5043 < * Watches: aRolexBvlgari, Dior, Hermes, Oris, Cartier, AP and more brands > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.725 5043 < * Louis Vuitton Bags & Wallets > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.726 5043 < * Gucci Bags > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.726 5043 < * Tiffa+ > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.726 5043 < ny & Co Jewerly > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.726 5043 < > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.726 5043 < Enjoy a full 1 year WARRANTY > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.727 5043 < Shipment via reputable courier: FEDEX, UPS, DHL and EMS Speedpost > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.727 5043 < You will 100% recieve your order > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.727 5043 < Save Up to 75% OFF Quality Watches > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.727 5043 < http://cleanwrap.ru > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.727 5043 < ? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.728 5043 < ------=_Part_50637_020A_EFC30E91.F8D369B8? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.728 5043 < Con+ > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.728 5043 < tent-Type: text/html; charset=us-ascii? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.728 5043 < Content-Transfer-Encoding: 8bit? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.729 5043 < ? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.729 5043 < ? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.729 5043 < <html><center><table border=10 cellspacing=0 cellpadding=8 bordercolor=93D9FF width+ > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.729 5043 > 451 See http://pobox.com/~djb/docs/smtplf.html.? > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.729 5043 > [EOF] > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.730 sslserver: warning: dropping connection, unable to read/create SSL instance > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.730 sslserver: end 5042 status 111;N > Oct 11 12:27:19 LaptopServer qmail: 12:27:19.730 sslserver: status: 0/14 > !DSPAM:4cb377fb32711395718678!