Re: Virus incident
On Thu, Nov 22, 2001 at 02:26:18PM +0100, François THOMAS wrote:
|
| > -----Message d'origine-----
| > De : Nigel Pauli [mailto:nigel@st-johns.org.uk]
| > What I can't understand though is why I'm sending out Antigen warnings.
| > I don't run it, I don't run MS Exchange. I run postfix and qpopper and
| > although W98 machines on my network run Outlook Express, I receive the
| > debian-user list on a linux box running kmail.
|
| I may be saying something stupid, but: it seems to me that it is only some
| kind of address rewriting. I mean that I can remember having seen
| antigen@my_server in the FROM field of the mails we are talking about..
What it means is that the sender didn't have any domain in the From:
address, and that is not allowed so your MTA put your domain on it. I
didn't look at the ones I got before I deleted them, so I can't
verify, but it would appear to everyone as if it came from their own
MTA/server.
-D
Reply to: