Bug 33903 – Got a virusmail today...

• Status: RESOLVED CANTFIX
• Product: Gentoo Infrastructure

[Description Marc Hildebrand (RETIRED) 2003-11-20 00:35:32 UTC]

Hi!
I don't know if this is the right place to report this but my mail-gateway filtered out a mail today and I thought you'd like to know.
This is the header:
----------------------------------------------------------------------------------

root@blutbad:  -> cat virus-20031120-090823-23069-06 
Return-Path: <[e-mail]>
Delivered-To: virus-quarantine
X-Envelope-To: <[e-mail]>
X-Envelope-From: <[e-mail]>
X-Quarantine-id: <virus-20031120-090823-23069-06>
Received: from localhost (localhost.squadrolon.lan [127.0.0.1])
        by squadrolon.homelinux.org (Postfix) with ESMTP id B4B3E14B47
        for <hildebrand@localhost>; Thu, 20 Nov 2003 09:08:05 +0100 (CET)
Received: from fwdallmx.t-online.com [194.25.134.90]
        by localhost with POP3 (fetchmail-6.2.3)
        for hildebrand@localhost (single-drop); Thu, 20 Nov 2003 09:08:05 +0100 (CET)
Received: from gentoo.org ([204.126.2.42]) by mailin01.sul.t-online.de
        with esmtp id 1AMjp1-0lsz3I0; Thu, 20 Nov 2003 09:05:51 +0100
Received: (qmail 12544 invoked by alias); 20 Nov 2003 08:05:50 -0000
Delivered-To: [e-mail]
Received: (qmail 18623 invoked from network); 20 Nov 2003 08:05:48 -0000
Received: from unknown (HELO newton.random-chaos.org.uk) (195.82.107.148)
  by mail.gentoo.org with DES-CBC3-SHA encrypted SMTP; 20 Nov 2003 08:05:48 -0000
Received: from [61.151.255.130] (helo=localhost)
        by newton.random-chaos.org.uk with smtp (Exim 4.10)
        id 1ANW5H-0004j3-00
        for [e-mail]; Sat, 22 Nov 2003 11:37:55 +0000
From: [e-mail]
To: Media-video <[e-mail]>
Reply-To: [e-mail]
X-Mailer: The Bat! (v1.62)
X-Priority: 1 (High)
Subject: Re[2]: our private photos                 piapsfrs
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------F532D9A4000F7DB"
Message-Id: <[e-mail]>
Date: Sat, 22 Nov 2003 11:37:55 +0000
X-Seen: false
X-AMaViS-Alert: INFECTED, message contains virus: W32/Mimail.C@mm
--------------------------------------------------------------------------------

I'm using amavis-ng and f-prot.
Did anyone get this message too?
Greets,
Marc.

[Comment 1 Marc Hildebrand (RETIRED) 2003-11-20 00:39:10 UTC]

Added media-video bc it's the reciepient of this mail.

[Comment 2 Martin Holzer (RETIRED) 2003-11-20 04:03:39 UTC]

[e-mail] does not exist

[Comment 3 SpanKY 2003-11-20 08:10:50 UTC]

yes other people got the message but it is, of course, spoofed