Random spam mail stuck in queue

Martin Hepworth maxsec at gmail.com
Sat Jan 7 13:29:41 GMT 2012


you running MailScanner with the -U switch at the top?

-- 
Martin Hepworth
Oxford, UK


On 7 January 2012 00:00, Paul Welsh <paul at welshfamily.com> wrote:

> Not a big deal because I've written a script to track them down but,
> after several months of no problems, my inbound mail queue got clogged
> up with the message below.
>
> It keeps getting scanned again and again.  Eats up loads of CPU.
>
> Running Exim 4.60 with MailScanner 4.84.3
>
> Below is the start of the message.  It's a tax refund spam with a
> "refund form" attached.
>
> Anyone else had this problem?
>
> Regards
>
> Paul
>
>
> 243P Received: from host2.lollo.info ([96.30.48.99])
>        by [my server]
>        (Exim 4.60)
>        (envelope-from <hmrct at taxes.co.uk>)
>        id 1RixlR-0003D4-NZ
>        for [me]; Fri, 06 Jan 2012 00:34:34 +0000
> 203P Received: from ftp.trad.logos.it ([193.41.7.210] helo=taxes.co.uk)
>        by host2.lollo.info with esmtpa (Exim 4.69)
>        (envelope-from <hmrct at taxes.co.uk>)
>        id 1RiwUT-0003rZ-6K; Thu, 05 Jan 2012 17:12:57 -0600
> 030R Reply-To: noreply at taxes.co.uk
> 049F From: "HM Revenue & Customs" <hmrct at taxes.co.uk>
> 032  Subject: Notification of refund
> 033  Date: 06 Jan 2012 00:12:54 +0100
> 058I Message-ID: <20120106001254.B0FF5166415E3CAD at taxes.co.uk>
> 018  MIME-Version: 1.0
> 085  Content-Type: multipart/mixed;
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120107/8e45d368/attachment.html


More information about the MailScanner mailing list