Mailing List Archive

Re: [OT] Heuristics.Phishing.Email.SpoofedDomain...
Hi there,

On Mon, 19 Apr 2021, Robert Kudyba wrote:

> Thanks I found a tip that mailq -qQ works but the naming convention you
> posted no longer appears to match.
> ...
> It does appear the first number, "1", is the year.

Correct, excepting presumably the typo in the your last example.

> But these messages were sent in April so the "3" doesn't
> correspond, unless January is "0" so April would be "3"?

Correct.

> Is there an updated convention for this?

I believe it's more or less unchanged since version 8.6 of Sendmail
(from the early 1990's). The ID is generated in assign_queueid() in
.../sendmail/queue.c, which uses the integer as an index to the string

"0123456789ABCDEF... you get the picture ....vwxyz"

and which you can see in action in your logs using Sendmail's debugging.
The theory is that it's unlikely that something will be in the queue for
more than sixty years. It certainly hasn't happened yet. :)

> Sorry I know you block emails directly to you so I had to send this to all.

Not _all_ direct emails. :)

73,
Ged.

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml