VirusScan on Mail Server

Considered UNSOLICITED BULK EMAIL, apparently from you

四国インターネットのユーザから、MLへ投稿できないという連絡がはいった。

From: Content-filter at hotshot.smb.net [mailto:postmaster@hotshot.smb.net]
Sent: Friday, October 09, 2009 1:23 PM
To: hogehoge@shikoku.ne.jp
Subject: Considered UNSOLICITED BULK EMAIL, apparently from you

A message from <hogehoge@shikoku.ne.jp>
to: sanyaku@smb.net

was considered unsolicited bulk e-mail (UBE).

Our internal reference code for your message is 28580-08/xQI5NTOBj8un

The message carried your return address, so it was either a genuine mail
from you, or a sender address was faked and your e-mail address abused by
third party, in which case we apologize for undesired notification.

We do try to minimize backscatter for more prominent cases of UBE and for
infected mail, but for less obvious cases some balance between losing
genuine mail and sending undesired backscatter is sought, and there can be
some collateral damage on either side.

First upstream SMTP client IP address: [220.156.141.211]
 mbos141-211.alpenstock.jp
According to a 'Received:' trace, the message apparently originated at:
 [124.154.94.101], pl101.nas923.matsuyama.nttpc.ne.jp HELO ohspc01
 hogehoge@shikoku.ne.jp@[124.154.94.101] envelope-sender
 <hogehoge@shikoku.ne.jp>

Return-Path: <hogehoge@shikoku.ne.jp>
From: =?iso-2022-jp?B?GyRCQmc2Nj4hMVEbKEI=?= <hogehoge@shikoku.ne.jp>
Message-ID: <004701ca4898$24663f70$6d32be50$@ne.jp>
Subject: =?iso-2022-jp?B?GyRCJUYlOSVIGyhC?=

Delivery of the email was stopped!

/usr/local/etc/amavisd.conf

$final_virus_destiny      = D_DISCARD;
# $final_banned_destiny     = D_BOUNCE;  四国インターネットのメールがはじかれるので
$final_banned_destiny     = D_PASS;
$final_spam_destiny       = D_BOUNCE;

大丈夫か???

それでもはじかれるので、

#  read_hash("/var/amavis/sender_scores_sitewide"),
  { # a hash-type lookup table (associative array)
    'kaohashi@ehime.med.or.jp'               => -3.0,
    'kaohashi@shikoku.ne.jp'                 => -3.0,
    'nobody@cert.org'                        => -3.0,
    'cert-advisory@us-cert.gov'              => -3.0,
    'owner-alert@iss.net'                    => -3.0,

してみる。 が、関係ないようなきもする・・・?

/usr/local/etc/postfix

hotshot:root {104} % touch reject_sender
hotshot:root {106} % postmap /usr/local/etc/postfix/reject_sender

というか、reject_senderは、デフォルトで全てパスなので関係ないし・・・


トップ   編集 凍結解除 差分 履歴 添付 複製 名前変更 リロード   新規 一覧 検索 最終更新   ヘルプ   最終更新のRSS
Last-modified: 2009-11-19 (木) 06:54:43