Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Qmail
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
vxspiritxv
n00b
n00b


Joined: 07 Apr 2003
Posts: 60

PostPosted: Wed Feb 25, 2004 10:31 pm    Post subject: Qmail Reply with quote

I got my mail working great, but seems there is spam comming to it that is detected as a possible virus, anyways im tired of seeing messages in my postmaster account from these, any way to get rid of them? Here is the raw message:

Code:

Return-Path: <#@[]>
Delivered-To: postmaster@quickesthosting.com
Received: (qmail 22865 invoked for bounce); 25 Feb 2004 22:03:20 -0000
Date: 25 Feb 2004 22:03:20 -0000
From: MAILER-DAEMON@quickesthosting.com
To: postmaster@quickesthosting.com
Subject: failure notice

Hi. This is the qmail-send program at quickesthosting.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

<spirit@localhost.quickesthosting.com>:
Sorry. Although I'm listed as a best-preference MX or A for that host,
it isn't in my control/locals file, so I don't treat it as local. (#5.4.6)

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 6634 invoked by uid 204); 25 Feb 2004 22:03:20 -0000
Date: 25 Feb 2004 22:03:20 -0000
From: "System Anti-Virus Administrator" <spirit@localhost.quickesthosting.com>
To: spirit@localhost.quickesthosting.com
Subject: problem found in sent message "Drive Thousands of Buyers to Your Web Office"
Message-ID: <quickesthosting.com107774660042627207@quickesthosting.com>
X-Tnz-Problem-Type: 40
MIME-Version: 1.0
Content-type: text/plain


Attention: qukfqlqk@horafeliz.com


A problem was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.

The problem was reported to be:

Illegal breakage found in header name - potential virus


Please contact your I.T support personnel with any queries regarding this
policy.


Your message was sent with the following envelope:

MAIL FROM: qukfqlqk@horafeliz.com
RCPT TO:   sales@quickesthosting.net

... and with the following headers:

---
MAILFROM: qukfqlqk@horafeliz.com
Received: from unknown (HELO buy-voicemail-systems.com) (217.81.43.11)
  by ns2.quickesthosting.com with SMTP; 25 Feb 2004 22:03:18 -0000
Received: (from www@localhost)
    by buy-voicemail-systems.com (8.12.5/8.12.2) with ESMTP id J87Gz029521097
    for <sales@quickesthosting.net>; Wed, 25 Feb 2004 17:00:00 -0500 (EST)
    (envelope-from www)
Message-ID: <261831761714.41Fd5SL5v8Fv38@localhost>
From: "Janean Crawford" <qukfqlqk@horafeliz.com>
To: sales@quickesthosting.net
Subject: Drive Thousands of Buyers to Your Web Office
Date: Wed, 25 Feb 2004 17:00:00 -0500 (EST)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - buy-voicemail-systems.com
X-AntiAbuse: Original Domain - buy-voicemail-systems.com
X-AntiAbuse: Originator/Caller UID/GID - [80 80] / [80 80]
X-AntiAbuse: Sender Address Domain -
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0222_01C3C64F.FBD71A00"
   
This is a multi-part message in MIME format.


---



The original message is kept in:

  quickesthosting.com:/var/spool/qmailscan/quarantine

where the System Anti-Virus Administrator can further diagnose it.

The Email scanner reported the following when it scanned that message:

---

---perlscanner results ---
problem 'Illegal breakage found in header name - potential virus'
 found in message /var/spool/qmailscan/quickesthosting.com107774659842627207
---


Also has anyone made a /var/spool/qmailscan/ cleaner script? im up to 29mb in that dir, mostly from qmail-queue.log
Back to top
View user's profile Send private message
skunkworx
Guru
Guru


Joined: 02 Feb 2003
Posts: 420
Location: Planet Houston

PostPosted: Thu Feb 26, 2004 12:03 am    Post subject: Reply with quote

Your email software is misconfigured. You have set up your virus scanner to deliver warnings to "spirit@localhost.quickesthosting.com", but, as the bounce message states, your qmail installation does not consider "localhost.quickesthosting.com" to be a local domain. You should either add "localhost.quickesthosting.com" to your /var/qmail/control/locals file (restarting qmail or sending a HUP signal to the running qmail-send process afterward), or reconfigure your anti-virus software to send messages to "spirit@quickesthosting.com" (or an address with some other local domain). Once you do this, user spirit will receive these messages properly. At that point, it is possible to set up a .qmail file for user spirit that will flush these messages. See the man page for dot-qmail if you are not familiar with setting up .qmail files.

Alternatively, your virus scanner may have an option to disable these warnings altogether. It's up to you if you want to go that route or not.
_________________
Proud to be a... eh, forget it.

"Everyday is just one day." -- not the Traveling Wilburys
Back to top
View user's profile Send private message
vxspiritxv
n00b
n00b


Joined: 07 Apr 2003
Posts: 60

PostPosted: Thu Feb 26, 2004 6:26 am    Post subject: Reply with quote

Ok thanks I went into the perl (qmail-scaner) file and fixed it. See if that reduces the messages before I go and play with the .qmail
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum