Problems with mailserver spamming itself due to loop

Mark msalists at gmx.net
Wed Jun 4 00:12:37 UTC 2008


Hello,

I have a recurring problem with my mailserver redelivering the same email over and over again to itself, until it gets entirely
overloaded.

I am not sure what triggers this, it seems that mostly some incoming spam emails might be to blame. I guess there is an underlying
configuration problem that needs to be fixed so that these loops will not happen any more, but I don't know where to  look.

Attached below is an email header of one of those emails that shows how the message is looping:
	Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
	....
	Received: (from root at localhost)

smtp2.mydomain.com and localhost is the machine...

Can somebody tell me what I can do to prevent these loops?

This is using sendmail 8.13.8-2, procmail 3.22-17.1, and cyrus-imapd 2.3.7-8.fc6 from Core 6.

Thanks,

MARK


------------------------------------------------------

V8
T1210887359
K0
N0
P153502
I8/3/9603209
B8BITMIME
F8b
$_localhost.localdomain [127.0.0.1]
$rESMTP
$ssmtp2.mydomain.com
${daemon_flags}
${if_addr}127.0.0.1
S<root at smtp2.mydomain.com>
A<>
Cnmatyas:532:503:<hr at mydomain.com>
rRFC822; hr at mydomain.com
RFDA:nmatyas
Cpmeuter:524:503:<hr at mydomain.com>
rRFC822; hr at mydomain.com
RFDA:pmeuter
Cmarnold_mail:519:503:marnold
rRFC822; hr at mydomain.com
RFDA:marnold_mail
Cmartin2:521:503:<hr at mydomain.com>
rRFC822; hr at mydomain.com
RFDA:martin2
Cmartin1:520:503:<hr at mydomain.com>
rRFC822; hr at mydomain.com
RFDA:martin1
H?P?Return-Path: <g>
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
        by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FLZwva014218
        for <hr at mydomain.com>; Thu, 15 May 2008 14:35:59 -0700
H?x?Full-Name: root
H??Received: (from root at localhost)
        by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FLZw3K014175;
        Thu, 15 May 2008 14:35:58 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
        by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKpKBq012154
        for <hr at mydomain.com>; Thu, 15 May 2008 13:51:20 -0700
H??Received: (from root at localhost)
        by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKpKts012142;
        Thu, 15 May 2008 13:51:20 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
        by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKfTBO027733
        for <hr at mydomain.com>; Thu, 15 May 2008 13:41:29 -0700
H??Received: (from root at localhost)
        by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKfTNX027728;
        Thu, 15 May 2008 13:41:29 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
        by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKVjPr014985
        for <hr at mydomain.com>; Thu, 15 May 2008 13:31:45 -0700
H??Received: (from root at localhost)
        by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKVjJx014982;
        Thu, 15 May 2008 13:31:45 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
        by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKL5Jv020635
        for <hr at mydomain.com>; Thu, 15 May 2008 13:21:05 -0700
H??Received: (from root at localhost)
        by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKL5s4020633;
        Thu, 15 May 2008 13:21:05 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
        by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKB25T000990
        for <hr at mydomain.com>; Thu, 15 May 2008 13:11:02 -0700
H??Received: (from root at localhost)
        by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKB2ck000989;
        Thu, 15 May 2008 13:11:02 -0700
H??Received: from psmtp.com (exprod5mx248.postini.com [64.18.0.168])
        by smtp2.mydomain.com (8.13.8/8.13.8) with SMTP id m4FJpgUg014951
        for <hr at mydomain.com>; Thu, 15 May 2008 12:51:43 -0700
H??Received: from source ([83.216.162.193]) by exprod5mx248.postini.com ([64.18.4.11]) with SMTP;
        Thu, 15 May 2008 14:51:41 CDT
H??Received: from [83.216.162.193] (port=29332 helo=monet7-193.comune.modena.it)
        by mydomain.com.s5a2.psmtp.com with esmtp
        id 854627-5bbed1-65
        for hr at mydomain.com; Thu, 15 May 2008 21:51:31 +0100
H??Message-ID: <482C9443.3040705 at mydomain.com>
H??Date: Thu, 15 May 2008 21:51:31 +0100
H??From: "Jessie" <vhheju at mydomain.com>
H??User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
H??MIME-Version: 1.0
H??To: "Brandi" <hr at mydomain.com>
H??Subject: Invoice from Mail.com
H??Content-Type: text/plain; charset=us-ascii; format=flowed
H??Content-Transfer-Encoding: 7bit
H??X-Antivirus: avast! (VPS 080515-1, 05/15/2008), Outbound message
H??X-Antivirus-Status: Clean
H??X-pstn-levels:     (S: 0.00000/21.22438 CV:99.0000 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
H??X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m c
H??X-pstn-addresses: from <vhheju at mydomain.com> forward (org good) [47/3]
.





More information about the fedora-list mailing list