Jason,
Thank you for your h*lp. I made the addition to taboo_headers and almost
immediately received 5 bounces. This loop is really insidious, fortunately
several lizt members notified me rather quickly. In all I had ~24 hours of
looping, with 50 to 60 duplicate messages going out to the list.
On 24 Oct 1997, Jason L Tibbitts III wrote:
> Looks to me like you're pretty much identified the source of the feedback;
> put
>
> /received:.*clever.net/i
>
> in taboo_headers and see what bounces. If that doesn't catch them, you
> have some serious weirdness.
Did the trick!
> If you continue to get feedback after you've removed the seemingly
> offending address, grab do_mx from my FTP site
> (ftp.hpc.uh.edu:/pub/majordomo) and see if any other addresses on your list
> MX to something at clever.net.
I believe the feedback is stopped, at least taboo_headers is catching
messages. Unless there is another problem, the loop is ended. I tried
your program anyway, just to see what I had. No other addresses MX to
clever.net. Thanks for sharing do_mx, a nice addition to my bag of tricks.
> It's hard to tell. clever.net is receiving the mail from you for some
> reason; either do_mx or your Sendmail logs should show you why. You don't
> have any control over where it's forwarded form there; it might hit a
> .forward file or some bizarre email filter that bounces the mail all over
> the place and eventually back to you. Task one is to stop it
> (taboo_headers), task two is to figure out what address causes delivery to
> clever.net.
I did some investigating with nslookup and telnetting direct to the SMTP
servers. I found an address at econdata.com that was forwarded to
clever.net, which then somehow became desupernet.net (not sure if
.forward). Once I collect all the facts together I will contact the
postmaster and try to figure out what is causing the feedback.
Thank you Jason.
-Mitch
References:
|
|
