Results 1 to 2 of 2

Thread: Strange email from MAILER-DAEMON

  1. #1
    firemike is offline Active Member
    Join Date
    Apr 2010
    Location
    Germany
    Posts
    28
    Rep Power
    5

    Default Strange email from MAILER-DAEMON

    One of our customers received a strange email from MAILER-DAEMON.
    It is a spam-mail forwarded by the zimbra mailerdaemon.
    Whats going wrong here?


    Received: from mail.mydomain.xy (LHLO mail.mydomain.xy) (192.168.100.95) by
    mail.mydomain.xy with LMTP; Sat, 21 Aug 2010 20:45:11 +0200 (CEST)
    Received: from localhost (localhost.localdomain [127.0.0.1])
    by mail.mydomain.xy (Postfix) with ESMTP id 065F03E8002
    for <customer@mydomain.xy>; Sat, 21 Aug 2010 20:45:11 +0200 (CEST)
    X-Virus-Scanned: amavisd-new at mydomain.xy
    X-Spam-Flag: NO
    X-Spam-Score: 3.892
    X-Spam-Level: ***
    X-Spam-Status: No, score=3.892 tagged_above=-10 required=5
    tests=[BAYES_00=-1.9, FH_FROMEML_NOTLD=1.082,
    MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_NJABL_PROXY=2.224,
    RCVD_IN_RP_RNBL=1.31, RCVD_NUMERIC_HELO=1.164, T_FRT_CONTACT=0.01,
    UNPARSEABLE_RELAY=0.001] autolearn=no
    Received: from mail.mydomain.xy ([127.0.0.1])
    by localhost (mail.mydomain.xy [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id 078Nx1QqwR7r for <customer@mydomain.xy>;
    Sat, 21 Aug 2010 20:45:07 +0200 (CEST)
    Received: from mi-ob.rzone.de (mi-ob.rzone.de [81.169.146.149])
    by mail.mydomain.xy (Postfix) with ESMTPS id 624F33E8001
    for <customer@mydomain.xy>; Sat, 21 Aug 2010 20:45:05 +0200 (CEST)
    X-RZG-FWD-BY: customer@mydomain.xy
    Received: from RZmta-internal (client mail forwarder)
    by mailin.webmailer.de (voltan mi19) (RZmta 23.5)
    for <customer@mydomain.xy>; Sat, 21 Aug 2010 20:44:25 +0200 (MEST)
    Message-ID: <R05c32m7LIZXjG.RZmta@mailin.rzone.de>
    X-RZG-CLASS-ID: mi
    Received: from apple2.w3link.net ([198.252.166.91])
    by mailin.webmailer.de (voltan mi19) (RZmta 23.5)
    with ESMTP id R05c32m7LIZXjG for <customer@mydomain.xy>;
    Sat, 21 Aug 2010 20:44:25 +0200 (MEST)
    Date: Sat, 21 Aug 2010 14:44:01 -0400
    Received: from 84.122.131.85 ([84.122.131.85])
    (authenticated user robblackey@protectplus.com)
    by apple2.w3link.net (Kerio MailServer 6.6.2)
    for customer@mydomain.xy;
    Sat, 21 Aug 2010 14:43:48 -0400
    To: customer@mydomain.xy
    Subject: Die Vakanz fur Sie,Vakanz, Die Vakanz von Grand Exchange, Job als Testkaufer.
    From: MAILER-DAEMON@mail.mydomain.xy

  2. #2
    firemike is offline Active Member
    Join Date
    Apr 2010
    Location
    Germany
    Posts
    28
    Rep Power
    5

    Default more information

    Where to change the behavier, that emails without sender-adresses are forwarded by the Mailer-Daemon?

    Thats no good. Especially in case of spam-mails.
    Our customer ist very surprised receiving spam mails from the own zimbra-system (he thinks..)

    Here some more information from the logfile:

    Aug 21 20:44:03 post zmmailboxdmgr[6444]: status requested
    Aug 21 20:44:03 post zmmailboxdmgr[6444]: status OK
    Aug 21 20:45:05 post postfix/smtpd[7111]: connect from mi-ob.rzone.de[81.169.146.149]
    Aug 21 20:45:05 post postfix/smtpd[7111]: setting up TLS connection from mi-ob.rzone.de[81.169.146.149]
    Aug 21 20:45:05 post postfix/smtpd[7111]: Anonymous TLS connection established from mi-ob.rzone.de[81.169.146.149]: TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)
    Aug 21 20:45:05 post postfix/smtpd[7111]: 624F33E8001: client=mi-ob.rzone.de[81.169.146.149]
    Aug 21 20:45:05 post postfix/cleanup[7140]: 624F33E8001: message-id=<R05c32m7LIZXjG.RZmta@mailin.rzone.de>
    Aug 21 20:45:05 post postfix/qmgr[29976]: 624F33E8001: from=<>, size=1432, nrcpt=1 (queue active)
    Aug 21 20:45:05 post postfix/smtpd[7111]: disconnect from mi-ob.rzone.de[81.169.146.149]
    Aug 21 20:45:07 post amavis[13131]: (13131-03) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100820T134831-13131: <> -> <customer@indiray.de> SIZE=1432 Received: from post.indiray.de ([127.0.0.1]) by localhost (post.indiray.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <customer@indiray.de>; Sat, 21 Aug 2010 20:45:07 +0200 (CEST)
    Aug 21 20:45:07 post amavis[13131]: (13131-03) Checking: 078Nx1QqwR7r [81.169.146.149] <> -> <customer@indiray.de>
    Aug 21 20:45:09 post zmmailboxdmgr[7410]: status requested
    Aug 21 20:45:09 post zmmailboxdmgr[7410]: status OK
    Aug 21 20:45:10 post zmmailboxdmgr[7471]: status requested
    Aug 21 20:45:10 post zmmailboxdmgr[7471]: status OK
    Aug 21 20:45:11 post postfix/smtpd[7504]: connect from localhost.localdomain[127.0.0.1]
    Aug 21 20:45:11 post postfix/smtpd[7504]: 065F03E8002: client=localhost.localdomain[127.0.0.1]
    Aug 21 20:45:11 post postfix/cleanup[7140]: 065F03E8002: message-id=<R05c32m7LIZXjG.RZmta@mailin.rzone.de>
    Aug 21 20:45:11 post postfix/smtpd[7504]: disconnect from localhost.localdomain[127.0.0.1]
    Aug 21 20:45:11 post postfix/qmgr[29976]: 065F03E8002: from=<>, size=2229, nrcpt=1 (queue active)
    Aug 21 20:45:11 post amavis[13131]: (13131-03) FWD via SMTP: <> -> <customer@indiray.de>,BODY=7BIT 250 2.0.0 Ok, id=13131-03, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 065F03E8002
    Aug 21 20:45:11 post amavis[13131]: (13131-03) Passed CLEAN, [81.169.146.149] [84.122.131.85] <> -> <customer@indiray.de>, Message-ID: <R05c32m7LIZXjG.RZmta@mailin.rzone.de>, mail_id: 078Nx1QqwR7r, Hits: 3.892, size: 1432, queued_as: 065F03E8002, 4641 ms
    Aug 21 20:45:11 post postfix/smtp[7146]: 624F33E8001: to=<customer@indiray.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=5.7, delays=0.09/0/2/3.7, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=13131-03, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 065F03E8002)
    Aug 21 20:45:11 post postfix/qmgr[29976]: 624F33E8001: removed
    Aug 21 20:45:11 post postfix/lmtp[7508]: 065F03E8002: to=<customer@indiray.de>, relay=post.indiray.de[192.168.100.95]:7025, delay=0.17, delays=0.06/0/0/0.1, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)
    Aug 21 20:45:11 post postfix/qmgr[29976]: 065F03E8002: removed
    Aug 21 20:46:03 post zmmailboxdmgr[7780]: status requested
    Aug 21 20:46:03 post zmmailboxdmgr[7780]: status OK

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] mailboxmanager does not start
    By jrefl5 in forum Administrators
    Replies: 18
    Last Post: 01-30-2012, 11:40 PM
  2. [SOLVED] Moving Zimbra to a new server
    By krolen in forum Administrators
    Replies: 109
    Last Post: 02-05-2009, 11:38 AM
  3. need advice on configuring zimbra to work with fax server
    By pheonix1t in forum Administrators
    Replies: 0
    Last Post: 07-11-2007, 07:46 PM
  4. upgrade to 4.0.3 antispam does'nt work
    By lucanannipieri in forum Administrators
    Replies: 14
    Last Post: 11-07-2006, 03:56 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •