AW: [Mimedefang] Messages that slip through access db

[Martin Bene]

Hi Stefano,

> virtualoffers.net               ERROR:"550 Domain explicitly denied"
> 
> in my access file, but I still get mail from this at virtualoffers.net or
> that at virtualoffers.net from time to time.  I have saved the 
> file and also
> done makemap after saving it.  Any ideas on why that might be 
> happening?

Check for envelope from != From: header. Sendmail access map only checks the
envelope header; what you're seeing when you look at the email is the From:
header inside the message; these two don't necessarily have to be the same,
esp. when you're dealing with spam. 

look at the received: headers in the mail for something like this:

Received: from www.roaringpenguin.com (roaringpenguin.com [216.191.236.23]
(may be forged))
	by relay.icomedias.com (8.12.5/8.12.5) with ESMTP id g9HFlYcj015134
	for <martin.bene at icomedias.com>; Thu, 17 Oct 2002 17:47:35 +0200

the for <....> in the last line is the actual envelope from logged by
sendmail. if that isn't in you access db, sendmail will let the message
through.

Bye, Martin