Hello, I've just received a spam email from a client who presented itself as emx.mail.ru but its ip 117.30.137.22 resolves to 22.137.30.117.broad.xm.fj.dynamic.163data.com.cn
Are reverse client hostname and the ehlo one not supposed to match? --Eugene