From owner-freebsd-questions@FreeBSD.ORG Wed May 12 21:50:18 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 606D516A4CE for ; Wed, 12 May 2004 21:50:18 -0700 (PDT) Received: from priv-edtnes40.telusplanet.net (outbound05.telus.net [199.185.220.224]) by mx1.FreeBSD.org (Postfix) with ESMTP id B75FA43D1F for ; Wed, 12 May 2004 21:50:17 -0700 (PDT) (envelope-from viktorlazlo@telus.net) Received: from byx0rm.mr-clevver.com ([154.20.11.99]) by priv-edtnes40.telusplanet.netESMTP <20040513045017.LAOO4645.priv-edtnes40.telusplanet.net@byx0rm.mr-clevver.com>; Wed, 12 May 2004 22:50:17 -0600 Date: Wed, 12 May 2004 21:50:56 -0700 (PDT) From: Viktor Lazlo X-X-Sender: viktorlazlo@byx0rm.mr-clevver.com To: Bob Perry In-Reply-To: <20040513030052.GA706@sphinx.alpha.domain> Message-ID: <20040512214943.G38128@byx0rm.mr-clevver.com> References: <20040513030052.GA706@sphinx.alpha.domain> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-questions@freebsd.org Subject: Re: Return Delivery of Mail I've never Sent X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 May 2004 04:50:18 -0000 On Wed, 12 May 2004, Bob Perry wrote: > Just setup mutt and I've begun to notice mail return to me > indicating that it did not pass the server content filter, > etc. The last one stated that a virus was found, file name > disco.zip, virus name W32/Netsky.c@MM!zip and apprarently > was found by McAfee Scanning Engine (4359/4.3.20). What > makes it worse is that the recipient is not recognizable. > > I understand that my system can be used as a mail relay and > would like to know how to combat this. Can anyone point me > in the right direction so that I can quickly resolve this > issue? If the bounced email contains headers check to see if it originates from your IP--most likely it is spoofing the return address. Cheers, Viktor