On 7 Feb 2003, Tony Earnshaw wrote: > > >From [EMAIL PROTECTED] Wed Feb 5 17:40:30 2003 > > >Received: from statefed.com ([159.134.195.131]) > > > by host.domain.org (8.11.1/8.11.1) with SMTP id h161eIB83432 > > > for <[EMAIL PROTECTED]>; Wed, 5 Feb 2003 17:40:24 -0800 (PST) > > > (envelope-from [EMAIL PROTECTED]) > > The header is interesting. The receiving mailserver would seem to be > confirming the identity of statefed.com (IP in angle brackets in > parentheses, showing it's done a reverse lookup on the IP number, which > is what my smtp server does for each mail received).
Actually it looks like the reverse lookup failed. It looks like host.domain.org is running sendmail 8.11.1 and sendmail formats things a little differently to the way Exim (which I assume is what you are familiar with) does. The string preceding the opening parenthesis is the HELO parameter. Had the reverse lookup on the IP number succeeded, the result would have been inserted between the opening parenthesis and the opening square bracket. So it would look like this: Received: from helo-parameter (domain-name [IP number]) ... whereas where the reverse lookup fails it looks like Received: from helo-parameter ([IP number]) ... which is what you have here. Regards Scott Larnach, Edinburgh University ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
