Somebody is using something alike fetchmail, and resending
all received email out to the "To:" and "Cc:" headers in
the picked up email.
Are there many subscribers at arnet.com.ar ??
On Tue, Apr 17, 2001 at 01:40:08PM -0700, David S. Miller wrote:
> Received: from oss.sgi.com ([IPv6:::ffff:216.32.174.190]:35078 "EHLO
> oss.sgi.com" smtp-auth: <none> TLS-CIPHER: <none> TLS-PEER: <none>)
> by mail.zmailer.org with ESMTP id <S296912AbRDRPTQ>;
> Wed, 18 Apr 2001 18:19:16 +0300
> Received: from localhost (mail@localhost)
> by oss.sgi.com (8.11.3/8.11.3) with SMTP id f3IFIg801950;
> Wed, 18 Apr 2001 08:18:42 -0700
> X-Authentication-Warning: oss.sgi.com: mail owned process doing -bs
> Received: by oss.sgi.com (bulk_mailer v1.13); Wed, 18 Apr 2001 08:18:41 -0700
> Received: (from majordomo@localhost)
> by oss.sgi.com (8.11.3/8.11.3) id f3IFIfx01928
> for netdev-outgoing; Wed, 18 Apr 2001 08:18:41 -0700
> Received: from smtp1.arnet.com.ar (host191006.arnet.net.ar [200.45.191.6]
> (may be forged))
> by oss.sgi.com (8.11.3/8.11.3) with SMTP id f3IFIdM01924
> for <netdev@xxxxxxxxxxx>; Wed, 18 Apr 2001 08:18:40 -0700
> Received: (qmail 948 invoked from network); 18 Apr 2001 15:18:32 -0000
> Received: from host000020.arnet.net.ar (HELO smtpmcis1.arnet.com.ar)
> (200.45.0.20)
> by host191006.arnet.net.ar with SMTP; 18 Apr 2001 15:18:32 -0000
> Received: from mail pickup service by smtpmcis1.arnet.com.ar with Microsoft
> SMTPSVC;
> Wed, 18 Apr 2001 12:09:46 -0300
> Received: from recife.arnet.com.ar ([192.168.202.70]) by mail1.arnet.com.ar
> with Microsoft SMTPSVC(5.5.1877.677.67);
> Tue, 17 Apr 2001 17:41:28 -0300
> Received: (qmail 32567 invoked from network); 17 Apr 2001 20:41:27 -0000
> Received: from oss.sgi.com (216.32.174.190)
> by recife.arnet.com.ar with SMTP; 17 Apr 2001 20:41:27 -0000
> Received: from localhost (mail@localhost)
> by oss.sgi.com (8.11.3/8.11.3) with SMTP id f3HKemB26692;
> Tue, 17 Apr 2001 13:40:48 -0700
> X-Authentication-Warning: oss.sgi.com: mail owned process doing -bs
> Received: by oss.sgi.com (bulk_mailer v1.13); Tue, 17 Apr 2001 13:40:13 -0700
> Received: (from majordomo@localhost)
> by oss.sgi.com (8.11.3/8.11.3) id f3HKeCv26587
> for netdev-outgoing; Tue, 17 Apr 2001 13:40:12 -0700
> Received: from pizda.ninka.net (IDENT:root@xxxxxxxxxxxxxxx [216.101.162.242])
> by oss.sgi.com (8.11.3/8.11.3) with ESMTP id f3HKeCM26584
> for <netdev@xxxxxxxxxxx>; Tue, 17 Apr 2001 13:40:12 -0700
> Received: (from davem@localhost)
> by pizda.ninka.net (8.9.3/8.9.3) id NAA15043;
> Tue, 17 Apr 2001 13:40:08 -0700
> From: "David S. Miller" <davem@xxxxxxxxxx>
> MIME-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
> Message-ID: <15068.43560.329884.817170@xxxxxxxxxxxxxxx>
> Date: Tue, 17 Apr 2001 13:40:08 -0700 (PDT)
> To: Imran.Patel@xxxxxxxxx
> Cc: netdev@xxxxxxxxxxx
> Subject: Re: frag id byte order (PATCH)
> In-Reply-To: <2D6CADE9B0C6D411A27500508BB3CBD0013C7923@eseis15nok>
> References: <2D6CADE9B0C6D411A27500508BB3CBD0013C7923@eseis15nok>
> X-Mailer: VM 6.75 under 21.1 (patch 13) "Crater Lake" XEmacs Lucid
> Sender: owner-netdev@xxxxxxxxxxx
> Return-Path: <owner-netdev@xxxxxxxxxxx>
|