Le 01/04/2011 01:25, Stan Hoeppner a écrit : > mouss put forth on 3/31/2011 4:38 PM: >> Le 31/03/2011 17:52, Stan Hoeppner a écrit : >>> >>> Received: from mail-iw0-f176.google.com (biz88.inmotionhosting.com >>> [66.117.14.32]) >>> by greer.hardwarefreak.com (Postfix) with ESMTP id F297D6C12E >>> for <s...@hardwarefreak.com>; Thu, 31 Mar 2011 06:29:19 -0500 >>> >>> >>> biz88.inmotionhosting.com is the reverse name and >>> mail-iw0-f176.google.com is the forward name, correct? How is this VPS >>> hosted snowshoe spammer spoofing a forward host name of google.com? >>> >> >> they are spoofing HELO. > > Which is the answer to my question. > >> if you feel motivated, contact InMotion. >> otherwise [snip] > > You should know me well enough by now mouss to realize that I'd already > blocked the parent /20, and Corporate-Colocation's other 19 netblocks, > after some investigation, before I sent my question to the list. ;) >
yep. but in a public list, "you" is "others" ;-p as usual, thanks for reporting offenders...
