<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
Is there any way to configure MailScanner to bounce mail to the abuse
contact of an IP Netblock rather than what happened below. <br>
The sender was falsified and MailScanner sent it to the non existent
person at watermaster.org.&nbsp; Watermaster.org rejected the bounce<br>
since ktf doesn't exist.&nbsp; I'm dealing with the same problem on several
servers where garbage is being sent out saying it is from domains<br>
I support and then it's bounced to me but my /etc/mail/virtusertable is
similarly configured to that mail to non existent users is not accepted.<br>
<br>
In the example below the mail came from 219.134.77.247 which is in China<br>
<br>
<pre>inetnum:      219.128.0.0 - 219.137.255.255
netname:      CHINANET-GD
descr:        CHINANET Guangdong province network
descr:        Data Communication Division
descr:        China Telecom
country:      CN</pre>
I would want to bounce to the correct: <a class="moz-txt-link-abbreviated" href="mailto:abuse@gddc.com.cn">abuse@gddc.com.cn</a><br>
<br>
-------- Original Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
 cellspacing="0">
  <tbody>
    <tr>
      <th align="right" nowrap="nowrap" valign="baseline">Subject: </th>
      <td>Bad Filename Detected</td>
    </tr>
    <tr>
      <th align="right" nowrap="nowrap" valign="baseline">Date: </th>
      <td>Thu, 12 Apr 2007 04:20:57 -0400</td>
    </tr>
    <tr>
      <th align="right" nowrap="nowrap" valign="baseline">From: </th>
      <td>MailScanner <a class="moz-txt-link-rfc2396E" href="mailto:postmaster@corvette.deleted.com">&lt;postmaster@corvette.deleted.com&gt;</a></td>
    </tr>
    <tr>
      <th align="right" nowrap="nowrap" valign="baseline">To: </th>
      <td><a class="moz-txt-link-abbreviated" href="mailto:postmaster@corvette.deleted.com">postmaster@corvette.deleted.com</a></td>
    </tr>
  </tbody>
</table>
<br>
<br>
<pre>The following e-mails were found to have: Bad Filename Detected

    Sender: <a class="moz-txt-link-abbreviated" href="mailto:ktf@watermaster.org">ktf@watermaster.org</a>
IP Address: 219.134.77.247
 Recipient: <a class="moz-txt-link-abbreviated" href="mailto:username@deleted.com">username@deleted.com</a>
   Subject: I Love You Because
 MessageID: l3C8KHHg013901
    Report: MailScanner: Executable DOS/Windows programs are dangerous in email (greeting card.exe)


-- 
MailScanner
Email Virus Scanner
<a class="moz-txt-link-abbreviated" href="http://www.mailscanner.info">www.mailscanner.info</a>

</pre>
</body>
</html>