Misuse of my domain.

[Peter Bonivart]

You need to check on your server (the envelope is stripped from the mail
at delivery). Try something like this:

# grep E8CEFC062 /var/log/syslog (or what your mail log is called)

It should give you something similar to my previous example.

Do you run SA on its own? I see the report that you get and that you use
AWL...

/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.23-11,
SpamAssassin 2.60 + DCC 1.2.9, ClamAV 20030829

Erik Jakobsen wrote:
> Hi Peter. Here is the header from the culprit:
>
>  From - Sun Nov  9 10:04:43 2003
> X-UIDL: H>*#!]Bd"!:4K!!bf4!!
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 00000000
> Received: from localhost [127.0.0.1] by lajka2
>        with SpamAssassin (2.55 1.174.2.19-2003-05-19-exp);
>        Sun, 09 Nov 2003 10:04:06 +0100
> From: john at urbakken.dk
> To: Erik <erik at urbakken.dk>
> Date: Sun,  9 Nov 2003 09:35:38 +0100 (CET)
> Message-Id: <20031109083538.E8CEFC062 at fupA.post.tele.dk>
> X-Spam-Flag: YES
> X-Spam-Status: Yes, hits=5.2 required=5.0
>        tests=AWL,BAYES_90,NO_REAL_NAME
>        version=2.55
> X-Spam-Level: *****
> X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="----------=_3FAE0306.3C6CC969"
> X-UIDL: H>*#!]Bd"!:4K!!bf4!!