Duplicated Messages in this list!

[Michael H. Warfield]

	Including postmaster at mail.crc.com in this reply...

Daniel Fonseca enscribed thusly:

> Hi there!

> I've been since yesterday receiving the messages of this list, in
> duplicates. The first one with the Name and e-mail of the sender, and the
> second one with just the e-mail... strange...

> Can anyone take a look at what's going on?

	Looks like we've got some clown near mail.crc.com feeding the list
back to itself...  Here are some of the headers...


	Here are the headers from your original message.  Note the
Message-Id header indicated below...

> Return-Path: <samba-ntdom at samba.anu.edu.au>
> Received: from gorski.net (gorski.net [206.137.184.10])
> 	by alcove.wittsend.com (8.9.1/8.8.7) with SMTP id LAA13069
> 	for <mhw at alcove.wittsend.com>; Thu, 24 Sep 1998 11:10:19 -0400
> Received: (qmail 23641 invoked by uid 105); 24 Sep 1998 15:07:16 -0000
> Received: from samba.anu.edu.au (150.203.164.44)
>   by gorski.net with SMTP; 24 Sep 1998 15:07:16 -0000
> Received: from localhost ([127.0.0.1]:15531 "HELO" ident: "NO-IDENT-SERVICE[2]") by samba.anu.edu.au with SMTP id <12670721-7009>; Fri, 25 Sep 1998 01:07:06 +1000
> Message-Id: <Pine.LNX.3.96.980924155218.4979A-100000 at adamastor.med.up.pt>
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Errors-To: listproc-errors at samba.anu.edu.au
> Reply-To: daniel at med.up.pt
> Originator: samba-ntdom at samba.anu.edu.au
> Sender: samba-ntdom at samba.anu.edu.au
> Precedence: bulk
> From: Daniel Fonseca <daniel at med.up.pt>
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> To: Multiple recipients of list <samba-ntdom at samba.anu.edu.au>
> Subject: Duplicated Messages in this list!
> X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas
> X-URL: http://samba.anu.edu.au/listproc
> X-Comment: Discussion of NT domain controller support in Samba
> Content-Type: TEXT/PLAIN; charset=US-ASCII
> MIME-Version: 1.0
> In-Reply-To: <Pine.NEB.3.96.980924151343.18607M-100000 at cb1-gw.cb1.com>
> Date: 	Fri, 25 Sep 1998 01:07:06 +1000

	Now, here are the header from the rogue message, note the Message-Id
header in this one indicates the system mail.crc.com.

> Return-Path: <samba-ntdom at samba.anu.edu.au>
> Received: from gorski.net (gorski.net [206.137.184.10])
> 	by alcove.wittsend.com (8.9.1/8.8.7) with SMTP id LAA13110
>	for <mhw at alcove.wittsend.com>; Thu, 24 Sep 1998 11:22:49 -0400
> Received: (qmail 24895 invoked by uid 105); 24 Sep 1998 15:19:00 -0000
> Received: from samba.anu.edu.au (150.203.164.44)
>   by gorski.net with SMTP; 24 Sep 1998 15:19:00 -0000
> Received: from localhost ([127.0.0.1]:15941 "HELO" ident: "NO-IDENT-SERVICE[2]") by samba.anu.edu.au with SMTP id <12670723-20449>; Fri, 25 Sep 1998 01:18:46 +1000
> Message-Id: <9809249066.AA906650673 at mail.crc.com>
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Errors-To: listproc-errors at samba.anu.edu.au
> Reply-To: daniel at med.up.pt
> Originator: samba-ntdom at samba.anu.edu.au
> Sender: samba-ntdom at samba.anu.edu.au
> Precedence: bulk
> From: <daniel at med.up.pt>
  ^^^^^^^^^^^^^^^^^^^^^^^^
> To: Multiple recipients of list <samba-ntdom at samba.anu.edu.au>
> Subject: Duplicated Messages in this list!
> X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas
> X-URL: http://samba.anu.edu.au/listproc
> X-Comment: Discussion of NT domain controller support in Samba
> Content-Type: multipart/mixed; boundary="simple boundary"
> MIME-Version: 1.0
> X-Mailer: ccMail Link to SMTP R8.00.00
> Date: 	Fri, 25 Sep 1998 01:18:46 +1000

	Note, the change in the "From:" header from the original to the
rogue.  The original included a full name, while the rogue has been munged
down to only the E-Mail address...  Also note that the original message
was Mime Content-Type: TEXT/PLAIN but the rouge came out multipart/mixed.

	Unfortunately, the ListProcessor at samba.anu.edu.au is stripping
the "Received-By" message headers from the messages it has received.
That makes it much more difficult to diagnose problems like this.  This
is a BAD thing.  Based on the limited information that was retained,
however, it looks like the list is being sent to some address at or near
mail.crc.com.  At that destination, several headers (such as Message-Id and
From) are being stripped or munged and then the message is being sent back
to the list...  Thankfully, whoever has screwed this up did it in a way
that the loop appears to be only generating one feedback.  So far, it has
not fed back it's own looping messages and we've only seen single dups (to
the best of my knowledge...)

> TIA,

> Daniel


	Mike
-- 
 Michael H. Warfield    |  (770) 985-6132   |  mhw at WittsEnd.com
  (The Mad Wizard)      |  (770) 925-8248   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!