From: Paul L. <pa...@sq...> - 2008-11-30 09:38:32
|
Ralf, >> Recently, we have been victim of a phishing attack (read >> http://www.amazon.com/gp/blog/A1XJVH38GHOSHB for details). >> >> I noticed that the squirrel_logger plugin does actually log: >> >> 11/19/2008 22:11:43 [MASS_MAILING] idiotuser (charite.de) from 65.49.2.93 (65.49.2.93): Total 340 recipients >> >> but >> >> a) It doesn't notify postmaster, although I configured it to do so > > That's troubling. I'll try to look later, but any additional help you > can provide by running some internal tests (and watching for errors, > etc.) would be appreciated. Also, please show all software versions. Again, please show versions of SquirrelMail and Squirrel Logger. Also, please show what $sl_mass_mail_limit is set to in the Squirrel Logger configuration file. I tested just now and don't see any problems. Older versions of the plugin used to use a from address of "noreply", but this was changed more recently to "no...@ex...". Can you test to see if that is the problem (does that address get blocked? do you need to configure the from address yourself? what's wrong with noreply - why is it blocked if it is?)? >> $sl_send_alerts = array( >> 'MASS_MAILING' => "Possible outgoing spam: by %2 (%3) at %4 on %6: %7", >> ); >> $sl_alert_to = array( >> 'MASS_MAILING' => 'pos...@ch...', >> ); |