On Jan 9, 2007, at 3:44 AM, <[EMAIL PROTECTED]> <[EMAIL PROTECTED]
tech.com> wrote:
but we see message header ,we can see any valid username ,but we
see the From HEADER is ""168.1.49.97dgrrtgr" <>" and no [EMAIL PROTECTED]
tech.com"""""
Return-Path: <>
Received: (qmail 10514 invoked by uid 89); 8 Jan 2007 01:04:33 -0000
Received: by simscan 1.2.0 ppid: 10447, pid: 10511, t: 0.2801s
scanners: attach: 1.2.0 clamav: 0.88.7/m:41/d:2352
Received: from unknown (HELO winxp) ([EMAIL PROTECTED])
by 0 with ESMTPA; 8 Jan 2007 01:04:33 -0000
The key header is the first Received header.
You see where it says ([EMAIL PROTECTED])? That means someone
connected from 59.41.183.162 and authenticated as user webmaster.
--
Tom Collins - [EMAIL PROTECTED]
Vpopmail - virtual domains for qmail: http://vpopmail.sf.net/
QmailAdmin - web interface for Vpopmail: http://qmailadmin.sf.net/
