Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: ElFroggio on July 15, 2015, 08:25:16 PM

Title: Email from to
Post by: ElFroggio on July 15, 2015, 08:25:16 PM
Hi,

I received and email with some 'weird" from/to. I checked the headers and I get:

Code: [Select]
From: Suzanner Santiago <suzannersantiago@binaricodec.com>, "To:admin@appraisal.bc.ca <admin"@appraisal.bc.ca


Please note the quotation marks at the "To:admin@appraisal.bc.ca <admin"@appraisal.bc.ca

What happened?

Thanks

Syv
Title: Re: Email from to
Post by: CharlieBrady on July 15, 2015, 08:43:59 PM
Quote from: ElFroggio on July 15, 2015, 08:25:16 PM
Hi,

I received and email with some 'weird" from/to. I checked the headers and I get:

Code: [Select]
From: Suzanner Santiago <suzannersantiago@binaricodec.com>, "To:admin@appraisal.bc.ca <admin"@appraisal.bc.ca

  • No To header.
  • I would have expected this to be rejected, but it was accepted as a valid/existing address.

Please note the quotation marks at the "To:admin@appraisal.bc.ca <admin"@appraisal.bc.ca

What happened?

Thanks

Syv


The sender created the message with an invalid format. The sender's mail system was able to somehow parse the invalid address and determine a valid address to use as the "envelope recipient address". View the full mail headers to see the Delivered-To and Received headers.

SME server doesn't use the To: header for mail delivery; it uses the envelope recipient address.

As an analogy, consider a postcard which is inside an envelope. The postcard can have an unintelligible To: address, but if the envelope has a valid address on the outside, the postman will deliver it to the correct mailbox.

Title: Re: Email from to
Post by: ElFroggio on July 15, 2015, 10:09:46 PM
Code: [Select]
Delivered-To: alias-localdelivery-admin@appraisal.bc.ca
Received: (qmail 5027 invoked by uid 453); 15 Jul 2015 16:54:35 -0000
X-Spam-Level: *************
X-Spam-Status: Yes, hits=13.1 required=7.0
 tests=FREEMAIL_FROM,LOTS_OF_MONEY,MISSING_HEADERS,MISSING_SUBJECT,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,SPF_SOFTFAIL,URIBL_BLACK
X-Spam-Flag: YES
X-Spam-Check-By: 911networks.com
Received: from j-simplerecipes.com (HELO 19806.hostkey.com) (193.109.69.192)
    by 911networks.com (qpsmtpd/0.84) with ESMTP; Wed, 15 Jul 2015 09:54:33 -0700
Received: from 19806.hostkey.com (localhost [IPv6:::1])                             <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
 by 19806.hostkey.com (Postfix) with ESMTP id 97FCA16EA9
 for <admin@appraisal.bc.ca>; Wed, 15 Jul 2015 12:28:21 -0400 (EDT)          <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
From: Suzanner Santiago <suzannersantiago@binaricodec.com>, "To:admin@appraisal.bc.ca <admin"@appraisal.bc.ca
Message-Id: <20150715162821.97FCA16EA9@19806.hostkey.com>
Date: Wed, 15 Jul 2015 12:28:21 -0400 (EDT)
Subject: [SPAM]
X-Virus-Checked: Checked by ClamAV on 911networks.com

So it's their end? Correct?

Thanks

Syv
Title: Re: Email from to
Post by: CharlieBrady on July 16, 2015, 04:22:24 AM
Quote from: ElFroggio on July 15, 2015, 10:09:46 PM
So it's their end? Correct?

Correct, and it's marked as spam. So they have a spambot generating badly formatted mail. Why are you worried? And why are you delivering that spam into the mailbox?
Title: Re: Email from to
Post by: ElFroggio on July 16, 2015, 03:19:40 PM
Quote from: CharlieBrady on July 16, 2015, 04:22:24 AM
And why are you delivering that spam into the mailbox?
Because I'm the admin. I do not reject the spam, they are marked as spam, then the mua (claws) deals with it

Thanks

Syv
Title: Re: Email from to
Post by: Stefano on July 16, 2015, 04:48:20 PM
a mail with a SPAM score greater than 10 is 99.99999999999999999999999% SPAM, delivering it is useless

my 2c