> -----Original Message----- > From: Matthew Thomas [mailto:[EMAIL PROTECTED] > Sent: 04 November 2003 16:44 > To: [EMAIL PROTECTED] > Subject: [SAtalk] Curious about a header. > > > I received a spam with the header below. > > Return-Path: <[EMAIL PROTECTED]> > Received: from biocontrolsys.com ([66.50.175.12]) > by gateway.biocontrolsys.com (8.12.6/8.12.6) with ESMTP > id hA4G6EXp016886 > for <[EMAIL PROTECTED]>; Tue, 4 Nov 2003 08:06:16 -0800
> It didn't get marked as spam since it appears to come from > us, though the IP address is located in Puerto Rico. I was > just wondering how they get biocontrolsys.com associated with > their IP address. Is it a completely manufactured (not > "real") header? Can you create a test for this? > The received header added by your own gateway looks like it's taken the HELO command and copied it verbatim to the received: header, rather than doing its own reverse lookup - you should be able to configure your gateway to add the real reverse lookup (or 'unknown' if it hasn't got one, which is the case here). Tony ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
