Receive Mail without log entry |
Post Reply 
|
| Author | |
Gerd 
Guest Group 
|
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Receive Mail without log entryPosted: 18 April 2003 at 5:55pm |
|
Several times a day I get some e-mails in my Outlook with a "from address". Actually when displaying the options of the e-mail there is a from e-mail address but with 2 "" in front of the name. I assume that this causes Outlook to not display the from address. The strange thing is I can't find any log entries for that e-mail in my SPAM log file. Nor is there any entry in my Quarantine file. And 3rd, I have a keyword filter file with the words online,pharmacy which should have caught the above e-mail. Again, I assume after it's not in the log file that SPAMFilter did not see it, thus, did not reject it. I am curious how somebody could send an e-mail circumventing the SPAMFilter alltogether? Here is a part of the log http://file: 04/18/03 13:51:52:890 -- (380) Connection from: 146.82.203.151 - Originating country : United States This is the e-mail header from Outlook: Microsoft Mail Internet Headers Version 2.0 Received: from 209.233.124.30 ([61.159.235.36]) by NETFINITY.bavarian-cons.com with Microsoft SMTPSVC(5.0.2195.5329); Fri, 18 Apr 2003 14:06:24 -0700 Received: from tbyy.ccj4.org [231.27.114.199] by 209.233.124.30 with ESMTP id 68885965; Fri, 18 Apr 2003 19:06:00 -0300 Message-ID: <na-n60$3h6mi26$ca-i94$x2z-8-4@3ja.1vu> From: "" <sum@milo.vcn.bc.ca> To: <gerd.goebel@bavarian-cons.com> Subject: Fw: Meds - Never Leave Home! Date: Fri, 18 Apr 03 19:06:00 GMT X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="8_.DC.8__EF_C" Return-Path: sum@milo.vcn.bc.ca X-OriginalArrivalTime: 18 Apr 2003 21:06:26.0562 (UTC) FILETIME=[5FE3B620:01C305EE] --8_.DC.8__EF_C Content-Type: text/html Content-Transfer-Encoding: quoted-printable
--8_.DC.8__EF_C- And this is the contents of the e-mail: 24 Hour No Prior Prescriptions Private & Confidential Overnight Shipping We have a very large selection of Come Take A Look ==================== Not Interested
|
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 April 2003 at 11:39pm |
|
Gerd, From its headers, it looks like the email was not sent to SpamFilter, but went directly to your smtp server. I checked your DNS MX record configs, and saw that you have your primary MX record pointing to mail2.bavarian-cons.com (SpamFilter) and your secondary to mail.bavarian-cons.com (Microsoft SMTP). At http://logsat.com/spamfilter/details.asp you'll find more info on this, in the meantime here's the section that concerns you: ====================================== Please note the comment relative to the backup MX record. While it's a good idea to add them in case with problems with SpamFilter, keep in mind that some spammers will send emails to any server they find an MX record for. This means that they can send mail directly to your unprotected MTA, which will bypass SpamFilter and thus deliver the spam to the intended recipient. A good tradeoff would be to leave the backup MX during your testing phases, then remove it when you are confident SpamFilter does it's job. ====================================== Roberto FranceschettiLogSat Software |
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.102 seconds.