mouss put forth on 3/31/2011 4:38 PM: > Le 31/03/2011 17:52, Stan Hoeppner a écrit : >> >> Received: from mail-iw0-f176.google.com (biz88.inmotionhosting.com >> [66.117.14.32]) >> by greer.hardwarefreak.com (Postfix) with ESMTP id F297D6C12E >> for <s...@hardwarefreak.com>; Thu, 31 Mar 2011 06:29:19 -0500 >> >> >> biz88.inmotionhosting.com is the reverse name and >> mail-iw0-f176.google.com is the forward name, correct? How is this VPS >> hosted snowshoe spammer spoofing a forward host name of google.com? >> > > they are spoofing HELO.
Which is the answer to my question. > if you feel motivated, contact InMotion. > otherwise [snip] You should know me well enough by now mouss to realize that I'd already blocked the parent /20, and Corporate-Colocation's other 19 netblocks, after some investigation, before I sent my question to the list. ;) -- Stan
