Every user on my system got this message today. I don't see exactly how it
was delivered, it has no to addresses. Is there something I can
do/configure to prevent this type of message being passed along to my users?
I'm using sendmail, RH6.0 with updates, info as follows:
Version 8.9.3
Compiled with: LOG MATCHGECOS MIME7TO8 MIME8TO7 NAMED_BIND NETINET
NETUNIX NEWDB NIS QUEUE SCANF SMTP USERDB
I had some odd message about .forward in my maillog, too. I cut and pasted
part of it below also. In case it matters, there is no
/var/spool/mail/.forward file.
I cut and pasted the delivered message source SPAM header below:
Return-Path: <[EMAIL PROTECTED]>
Received: from dfg.poi (ABD4F271.ipt.aol.com [171.212.242.113])
by mls5.mlec.net (8.9.3/8.9.3) with SMTP id BAA02555;
Sat, 22 Jan 2000 01:42:17 -0600
Message-ID: <[EMAIL PROTECTED]>
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Bcc:
Reply-To:
Subject: MOTHEERS & OTHERS (18503)
Date: Fri, 21 Jan 2000 10:02:53 -0400 (EDT)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Status:
MOTHERS & OTHERS
My children come to the office every day.
......<snip SPAM>
-------------------
maillog exerpts:
Jan 22 01:42:35 mls5 sendmail[2456]: BAA02456: from=<[EMAIL PROTECTED]>,
size=1157, class=0, pri=1021157, nrcpts=34, msgid=<[EMAIL PROTECTED]>,
proto=SMTP, relay=ABD4F271.ipt.aol.com [171.212.242.113]
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456: forward
/var/spool/mail/.forward.mls5: Group writable directory
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456: forward
/var/spool/mail/.forward: Group writable directory
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456: to=<[EMAIL PROTECTED]>,
delay=00:00:35, xdelay=00:00:00, mailer=local, stat=Sent
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456: to=shorton, delay=00:00:35,
xdelay=00:00:00, mailer=local, stat=Sent
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:35, xdelay=00:00:00,
mailer=local, stat=Sent
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:35, xdelay=00:00:00,
mailer=local, stat=Sent
Jan 22 01:42:35 mls5 sendmail[2555]: BAA02555: from=<[EMAIL PROTECTED]>,
size=1208, class=0, pri=691208, nrcpts=23, msgid=<[EMAIL PROTECTED]>,
proto=SMTP, relay=ABD4F271.ipt.aol.com [171.212.242.113]
Jan 22 01:42:35 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:35, xdelay=00:00:00,
mailer=local, stat=Sent
Jan 22 01:42:36 mls5 sendmail[2575]: BAA02555: forward
/var/spool/news/.forward.mls5: Group writable directory
Jan 22 01:42:36 mls5 sendmail[2575]: BAA02555: forward
/var/spool/news/.forward: Group writable directory
Jan 22 01:42:36 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:36, xdelay=00:00:01,
mailer=local, stat=Sent
Jan 22 01:42:36 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:36, xdelay=00:00:00,
mailer=local, stat=Sent
Jan 22 01:42:36 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:36, xdelay=00:00:00,
mailer=local, stat=Sent
Jan 22 01:42:36 mls5 sendmail[2563]: BAA02456:
to=<[EMAIL PROTECTED]>, delay=00:00:36, xdelay=00:00:00,
mailer=local, stat=Sent
<snip>
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
