Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Anti-Spam: SPAM FOUND! (0.0.0.0) Deny reason: Invalid parameter

0

0

Article ID: KB21351 KB Last Updated: 27 Jul 2011Version: 1.0
Summary:
Meaning of event log - Anti-Spam: SPAM FOUND! (0.0.0.0) Deny reason: Invalid parameter.
Symptoms:
The following event log appears occasionally with zero IP address and invalid parameter:
2011-04-23 02:16:54 system warn 00563 Anti-Spam: SPAM FOUND ! (0.0.0.0) Deny reason: Invalid parameter.
Solution:
The log is generated due to the mail header "Received: (qmail 1450 invoked from network); 19 Apr 2011 09:17:55 -0000", because there is no valid IP address or hostname in the mail header as shown in the PCAP below:
Frame 20 (1136 bytes on wire, 1136 bytes captured)
Ethernet II, Src: Yamaha_16:dc:f7 (00:a0:de:16:dc:f7), Dst: JuniperN_ba:e3:86 (80:71:1f:ba:e3:86)
Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2)
Transmission Control Protocol, Src Port: 65326 (65326), Dst Port: smtp (25), Seq: 3386631973, Ack: 1792799608, Len: 1082
Simple Mail Transfer Protocol
C: .
[DATA fragments (2101 bytes): #18(1024), #20(1077)]
Internet Message Format
Received: (qmail 1450 invoked from network); 19 Apr 2011 09:17:55 -0000
Received: from unknown (HELO .) (8.8.8.208)\r\n by 192.168.83.132 with SMTP; 19 Apr 2011 18:17:55 +0900
Received [truncated]: from [9.9.9.133] (account userA@test.it HELO wcnzgejqvqy.jlvtqqeecocnqu.tv)\r\n\tby . (CommuniGate Pro SMTP 5.2.3)\r\n\twith ESMTPA id 809143514 for <lab@juniper.net>,\r\n\t
Date: Tue, 19 Apr 2011 14:47:54 +0530
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search