Problems with mailserver spamming itself due to loop
Hello,
I have a recurring problem with my mailserver redelivering the same email over and over
again to itself, until it gets entirely
overloaded.
I am not sure what triggers this, it seems that mostly some incoming spam emails might be
to blame. I guess there is an underlying
configuration problem that needs to be fixed so that these loops will not happen any more,
but I don't know where to look.
Attached below is an email header of one of those emails that shows how the message is
looping:
Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
....
Received: (from root@localhost)
smtp2.mydomain.com and localhost is the machine...
Can somebody tell me what I can do to prevent these loops?
This is using sendmail 8.13.8-2, procmail 3.22-17.1, and cyrus-imapd 2.3.7-8.fc6 from Core
6.
Thanks,
MARK
------------------------------------------------------
V8
T1210887359
K0
N0
P153502
I8/3/9603209
B8BITMIME
F8b
$_localhost.localdomain [127.0.0.1]
$rESMTP
$ssmtp2.mydomain.com
${daemon_flags}
${if_addr}127.0.0.1
S<root(a)smtp2.mydomain.com>
A<>
Cnmatyas:532:503:<hr@mydomain.com>
rRFC822; hr(a)mydomain.com
RFDA:nmatyas
Cpmeuter:524:503:<hr@mydomain.com>
rRFC822; hr(a)mydomain.com
RFDA:pmeuter
Cmarnold_mail:519:503:marnold
rRFC822; hr(a)mydomain.com
RFDA:marnold_mail
Cmartin2:521:503:<hr@mydomain.com>
rRFC822; hr(a)mydomain.com
RFDA:martin2
Cmartin1:520:503:<hr@mydomain.com>
rRFC822; hr(a)mydomain.com
RFDA:martin1
H?P?Return-Path: <g>
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FLZwva014218
for <hr(a)mydomain.com>; Thu, 15 May 2008 14:35:59 -0700
H?x?Full-Name: root
H??Received: (from root@localhost)
by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FLZw3K014175;
Thu, 15 May 2008 14:35:58 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKpKBq012154
for <hr(a)mydomain.com>; Thu, 15 May 2008 13:51:20 -0700
H??Received: (from root@localhost)
by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKpKts012142;
Thu, 15 May 2008 13:51:20 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKfTBO027733
for <hr(a)mydomain.com>; Thu, 15 May 2008 13:41:29 -0700
H??Received: (from root@localhost)
by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKfTNX027728;
Thu, 15 May 2008 13:41:29 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKVjPr014985
for <hr(a)mydomain.com>; Thu, 15 May 2008 13:31:45 -0700
H??Received: (from root@localhost)
by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKVjJx014982;
Thu, 15 May 2008 13:31:45 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKL5Jv020635
for <hr(a)mydomain.com>; Thu, 15 May 2008 13:21:05 -0700
H??Received: (from root@localhost)
by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKL5s4020633;
Thu, 15 May 2008 13:21:05 -0700
H??Received: from smtp2.mydomain.com (localhost.localdomain [127.0.0.1])
by smtp2.mydomain.com (8.13.8/8.13.8) with ESMTP id m4FKB25T000990
for <hr(a)mydomain.com>; Thu, 15 May 2008 13:11:02 -0700
H??Received: (from root@localhost)
by smtp2.mydomain.com (8.13.8/8.13.8/Submit) id m4FKB2ck000989;
Thu, 15 May 2008 13:11:02 -0700
H??Received: from psmtp.com (exprod5mx248.postini.com [64.18.0.168])
by smtp2.mydomain.com (8.13.8/8.13.8) with SMTP id m4FJpgUg014951
for <hr(a)mydomain.com>; Thu, 15 May 2008 12:51:43 -0700
H??Received: from source ([83.216.162.193]) by exprod5mx248.postini.com ([64.18.4.11])
with SMTP;
Thu, 15 May 2008 14:51:41 CDT
H??Received: from [83.216.162.193] (port=29332 helo=monet7-193.comune.modena.it)
by mydomain.com.s5a2.psmtp.com with esmtp
id 854627-5bbed1-65
for hr(a)mydomain.com; Thu, 15 May 2008 21:51:31 +0100
H??Message-ID: <482C9443.3040705(a)mydomain.com>
H??Date: Thu, 15 May 2008 21:51:31 +0100
H??From: "Jessie" <vhheju(a)mydomain.com>
H??User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
H??MIME-Version: 1.0
H??To: "Brandi" <hr(a)mydomain.com>
H??Subject: Invoice from Mail.com
H??Content-Type: text/plain; charset=us-ascii; format=flowed
H??Content-Transfer-Encoding: 7bit
H??X-Antivirus: avast! (VPS 080515-1, 05/15/2008), Outbound message
H??X-Antivirus-Status: Clean
H??X-pstn-levels: (S: 0.00000/21.22438 CV:99.0000 R:95.9108 P:95.9108 M:97.0282
C:98.6951 )
H??X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m c
H??X-pstn-addresses: from <vhheju(a)mydomain.com> forward (org good) [47/3]
.