[linux-elitists] Death of irony, #332 in a series

Rick Moen rick@linuxmafia.com
Fri Mar 26 19:28:40 PST 2004


Herewith, the organisation that invented SPF reveals that it isn't
bothering to check fr SPF RRs before mailing "You have a virus"
notifications to forged sender addresses.

----- Forwarded message from Mail Delivery System <MAILER-DAEMON@kelvin.pobox.com> -----

Return-path: <>
Envelope-to: rick@linuxmafia.com
Delivery-date: Fri, 26 Mar 2004 19:09:25 -0800
Received: from kelvin.pobox.com ([207.8.226.2]:43354)
	by linuxmafia.com with esmtp (Exim 4.30 #1)
	id 1B74CC-000189-V1
	for <rick@linuxmafia.com>; Fri, 26 Mar 2004 19:09:17 -0800
Received: by kelvin.pobox.com (Postfix)
	id 7614E9148C; Fri, 26 Mar 2004 22:09:16 -0500 (EST)
Date: Fri, 26 Mar 2004 22:09:16 -0500 (EST)
From: Mail Delivery System <MAILER-DAEMON@kelvin.pobox.com>
To: rick@linuxmafia.com
MIME-Version: 1.0
Message-Id: <20040327030916.7614E9148C@kelvin.pobox.com>
X-SA-Exim-Mail-From: 
Subject: Undelivered Mail Returned to Sender
Content-Type: multipart/report; report-type=delivery-status;
	boundary="1DA6B916DA.1080356956/kelvin.pobox.com"
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on 
	uncle-enzo.linuxmafia.com
X-Spam-Level: 
X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,MICROSOFT_EXECUTABLE,
	UPPERCASE_25_50 autolearn=no version=2.63
X-SA-Exim-Version: 3.1 (built Wed Aug 20 09:38:54 PDT 2003)
X-SA-Exim-Scanned: Yes
Lines: 425

Content-Description: Notification
This is the Postfix program at host kelvin.pobox.com.

The message below did not reach its final destination.

What happened exactly?  Our mail server kelvin.pobox.com
accepted your message and tried to forward it to
simon@tartarus.org.

Unfortunately, we had a problem delivering the message
to that address.  The excerpt below shows why your message
was not delivered.

If you don't know what this error means, or why we are trying
to deliver the message you sent to a Pobox.com address to a
totally different destination, please go to

    http://pobox.com/bounce-pobox.html

If you need further assistance regarding this message, please
contact your ISP, or postmaster@tartarus.org
Always include the full text of this problem report.

--------------- Reason For Delivery Failure ---------------

For further assistance, please send mail to <postmaster@tartarus.org>

If you do so, please include this problem report. You can
delete your own text from the message returned below.

			The Postfix program

<simon@tartarus.org>: host mail.lethe.tartarus.org[195.149.39.210] said: 554
    Disguised executable is probably a virus. See <http://tartarus.org/virus>.
    (in reply to end of DATA command)

Content-Description: Delivery report
Reporting-MTA: dns; kelvin.pobox.com
X-Postfix-Queue-ID: 1DA6B916DA
X-Postfix-Sender: rfc822; rick@linuxmafia.com
Arrival-Date: Fri, 26 Mar 2004 22:09:15 -0500 (EST)

Final-Recipient: rfc822; simon@tartarus.org
Original-Recipient: rfc822; anakin@pobox.com
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host mail.lethe.tartarus.org[195.149.39.210] said:
    554 Disguised executable is probably a virus. See
    <http://tartarus.org/virus>. (in reply to end of DATA command)

Content-Description: Undelivered Message
Received: from colander (localhost [127.0.0.1])
	by kelvin.pobox.com (Postfix) with ESMTP id 1DA6B916DA
	for <anakin@pobox.com>; Fri, 26 Mar 2004 22:09:15 -0500 (EST)
Received: from pobox.com (61-223-100-147.HINET-IP.hinet.net [61.223.100.147])
	by kelvin.pobox.com (Postfix) with ESMTP
	for <anakin@pobox.com>; Fri, 26 Mar 2004 22:09:09 -0500 (EST)
From: rick@linuxmafia.com
To: anakin@pobox.com
Subject: Re: Hello
Date: Sat, 27 Mar 2004 11:09:14 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0011_000058FD.00006DEB"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <20040327030915.1DA6B916DA@kelvin.pobox.com>

Please read the attached file.




----- End forwarded message -----



More information about the linux-elitists mailing list