[EMAIL PROTECTED] said: > On 7 Feb 2003, Tony Earnshaw wrote: > > > > >From [EMAIL PROTECTED] Wed Feb 5 17:40:30 2003 > > > >Received: from statefed.com ([159.134.195.131]) > > > > by host.domain.org (8.11.1/8.11.1) with SMTP id h161eIB83432 > > > > for <[EMAIL PROTECTED]>; Wed, 5 Feb 2003 17:40:24 -0800 (PST) > > > > (envelope-from [EMAIL PROTECTED]) > > > > The header is interesting. The receiving mailserver would seem to be > > confirming the identity of statefed.com (IP in angle brackets in > > parentheses, showing it's done a reverse lookup on the IP number, which > > is what my smtp server does for each mail received). > > Actually it looks like the reverse lookup failed. It looks like > host.domain.org is running sendmail 8.11.1 and sendmail formats things a > little differently to the way Exim (which I assume is what you are > familiar with) does.
Yep, Scott's right. A vaguely-related issue, BTW, is that some recent spamware is now inserting the *recipient's* MX IP address in the forged Received headers, which helps the spammers list-wash [1]. Sneaky. ([1]: list-washing: if a spammer gets hold of a complaint message which includes the headers of a spam, they can then decode those headers and figure out which user did the complaining, then (a) remove their addr from those lists, (b) add them to a few more, or (c) joe-job them.) --j. ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
