jeff donovan wrote: > here is a sample of the bounce: I have modified the real users name. > > > > Article rejected, un-authorized poster of realusern...@beth.k12.pa.us > Received: from XDYHONJUP [189.22.134.132] by john23.com with ESMTP > (SMTPD32-8.00) id A6C57D10052; Wed, 04 Feb 2009 08:23:17 -0500 > Received: from 189.22.134.132 by mail2.beth.k12.pa.us; Wed, 4 Feb 2009 > 11:22:50 -0300 If this is to be believed, then: grkni...@mx1 ~ $ host 132.134.22.189.zen.spamhaus.org 132.134.22.189.zen.spamhaus.org has address 127.0.0.4
Zen wins again and this is spam accepted by your server and not BackScatter. Check logs to verify this is not forged. Brian
