On Thu, Mar 31, 2011 at 10:52:58AM -0500, Stan Hoeppner wrote: > Received: from mail-iw0-f176.google.com (biz88.inmotionhosting.com > [66.117.14.32]) > by greer.hardwarefreak.com (Postfix) with ESMTP id F297D6C12E > for <s...@hardwarefreak.com>; Thu, 31 Mar 2011 06:29:19 -0500 > > > biz88.inmotionhosting.com is the reverse name and > mail-iw0-f176.google.com is the forward name, correct?
No, the "google" name is just the EHLO parameter sent by the client, it is not derived from DNS lookups and not verified. > How is this VPS > hosted snowshoe spammer spoofing a forward host name of google.com? This question is moot. -- Viktor.