[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Mailscanner Question



At 11:31 PM 1/30/2003, you wrote:
Just started using/trying out mailscanner...I must say very nicley
put together *.pkg BASSI (if your watching)
Have a question about a active account of mine...just not making
much sence right now,...ya, brain might not be in the right place
currentley...Anyway, trying to locate some info on where the "Sender:"
info evaporated to....if someone could explain this or even tell me
where to look I would appreciate it. By the way the blips below
are the result of M$ Outlook (first one) and the message "options"
second one) ref: Internet Headers if anyone is interested.

The following e-mail messages were found to have viruses in them:
Sender: <>
Recipient: <xxxxxxxx@xxxxxxxxxxx>
Subject: Delivery Status Notification (Failure)
MessageID: h0V2VIZ23687
Report: /home/spool/MailScanner/incoming/h0V2VIZ23687/love.scr  Infection:
W32/Lentin.M@mm
Windows Screensavers often hide viruses in email in love.scr

Return-Path: <postmaster>
Received: (from root@localhost)
by ns1.xxxxxxx.com (8.10.2/8.10.2) id h0V2VQm23711;
Thu, 30 Jan 2003 20:31:26 -0600
Date: Thu, 30 Jan 2003 20:31:26 -0600
Message-Id: <200301310231.h0V2VQm23711@xxxxxxxxxxxxxxx>
From: "MailScanner" <postmaster>
To: postmaster
Subject: Warning: E-mail viruses detected
---

The virus spoofed the header info. The lot is only part of the info, normally mailscanner has more info further down the email that tells you where the email actually came from. The second is mailscanner sending the notice to you from your server. Thus it is the header info from your server, not the virus email.



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.