[cobalt-users] Re: RE: RE: Re: How can I speed up Sendmail?

[Charlie Summers <charlie@xxxxxxxxxx>]

At 4:18 PM -0400 5/3/02, David Lucas is rumored to have typed:

> A lot of email generated today is due to people infected with the Klez 
> virus.

   Um, no, I actually know the difference between Klez and these spam emails.
See:

http://groups.google.com/groups?hl=en&safe=off&selm=3CD21532.DD5F91FA%40itctel.com

   ...for an example of the same type of email I received; you'll note it's
nothing whatsoever like Klez sends.

> I have done 
> a bit of research via isp's and have found out the people I thought were 
> trying to relay through me are actually people infected with the virus.

   Just add the X-Envelope-From: and X-Envelope-To: headers in sendmail
to capture the envelope information, and you won't need to jump through
those hoops with Klez. The worm alters the mail's From: header but doesn't
alter the envelope information, so it's easy to see (or block) those sending
the mail.

> Thanks 
> to a procmail recipe they are going away quietly.

   Post it with comments; there are many people here who appreciate lessons
in what procmail can do, based on the private mail I receive whenever I
post one.

         Charlie (who has a couple hundred Klez to compare the spam to;
                   and who also uses a Mac for email so it doesn't matter)