Hallo zusammen,
ist es möglich das durch einen manipulierten Header eine Spam - Mail im Gesendet-Ordner von TB landet?
Code
From - Tue Feb 13 22:51:42 2007
X-Account-Key: account4
X-UIDL: XHF"!JTK"!6jc!!hVN!!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
Return-Path: <>
X-Original-To: xxx@xxxx.de
Delivered-To: xxxxxxx@xxxxxxxxxxxxxxxxxx
Received: from mail.ccl.ru (mail.ccl.ru [195.222.130.78])
by xxxxxxx.isp-service.biz (Postfix) with ESMTP id 34B0DD881C5
for <xxxx@xxxxx.de>; Tue, 13 Feb 2007 21:14:55 +0100 (CET)
Received: from mail.ccl.ru (localhost.ccl.ru [127.0.0.1])
by mail.ccl.ru (8.13.8/8.13.6) with ESMTP id l1DKCjMn045200
for <xxxx@xxxx.de>; Wed, 14 Feb 2007 01:12:46 +0500 (YEKT)
Received: (from cyrus@localhost)
by mail.ccl.ru (8.13.8/8.13.6/Submit) id l1DKCjku045199
for xxxx@xxxx.de; Wed, 14 Feb 2007 01:12:45 +0500 (YEKT)
Message-ID: <cmu-sieve-17939-1171397565-9@post.ccl.ru>
Date: Wed, 14 Feb 2007 01:12:45 +0500
X-Sieve: CMU Sieve 2.2
From: Mail Sieve Subsystem <postmaster@mail.ccl.ru>
To: <xxxx@xxxx.de>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=disposition-notification;
boundary="17939/post.ccl.ru"
Subject: Automatically rejected mail
Auto-Submitted: auto-replied (rejected)
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on
alfa1018.isp-service.biz
X-Spam-Level:
X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_00,FORGED_RCVD_HELO,
HTML_50_60,HTML_BADTAG_00_10,HTML_MESSAGE,HTML_NONELEMENT_00_10,
MAILTO_TO_SPAM_ADDR,MIME_HTML_MOSTLY autolearn=no version=3.0.3
X-UIDL: XHF"!JTK"!6jc!!hVN!!
This is a MIME-encapsulated message
--17939/post.ccl.ru
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Your message was automatically rejected by Sieve, a mail
filtering language.
The following reason was given:
� �ПжалеМО�, �� Ме за�егО���О�ПваМ�,
как легал�М�й П�п�авО�ел� в ЌПей
пП��ПвПй �О��еЌе. �ап�ав��е �а�е
�ППб�еМОе пП аЎ�е�� marina@perm.ru c
пПЌе�кПй "Ўл� zhm".
--17939/post.ccl.ru
Content-Type: message/disposition-notification
Reporting-UA: post.ccl.ru; Cyrus v2.2.12/CMU Sieve 2.2
Final-Recipient: rfc822; zhm
Original-Message-ID: <02af01c74f99$58a530c0$1f330e0a@switzerland>
Disposition: automatic-action/MDN-sent-automatically; deleted
--17939/post.ccl.ru
Content-Type: message/rfc822
Return-Path: <xxxx@xxxx.de>
Received: from mail.ccl.ru ([unix socket])
by post.ccl.ru (Cyrus v2.2.12) with LMTPA;
Wed, 14 Feb 2007 01:12:45 +0500
X-Sieve: CMU Sieve 2.2
Received: from chute.ccl.ru (ns2.ccl.ru [195.222.142.34])
by mail.ccl.ru (8.13.8/8.13.6) with ESMTP id l1DKCg8a045146;
Wed, 14 Feb 2007 01:12:42 +0500 (YEKT)
X-Envelope-To: zhm
Received: from cable210a080.usuarios.retecal.es (cable210a080.usuarios.retecal.es [212.183.210.80])
by chute.ccl.ru (8.13.8/8.13.8) with SMTP id l1DKCJmJ030839;
Wed, 14 Feb 2007 01:12:29 +0500 (YEKT)
Message-ID: <02af01c74f99$58a530c0$1f330e0a@switzerland>
From: "Remont" <xxxx@xxxx.de>
To: <wizard-comfort@perm.ru>
Subject: =?koi8-r?B?8sXNz87Uz9PF1Ng=?=
Date: Tue, 13 Feb 2007 21:04:03 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_02AC_01C74FB2.7DDA9B00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
Alles anzeigen
Der Header ist relativ lang, und auf den ersten Blick sieht es so aus, als ob ich die mail gesendet habe (habe ich natürlich nicht).
Einen Virus schließe ich mal aus, das würde glaub ich anders aussehen. (dann würde es nicht bei einer Mail bleiben)
Hat jemand schon mal ähnliche Erfahrungen gemacht?
schöne Grüße
Toolman