>...
>Is anyone else getting spam from gmail? The ones I'm getting are very
>lengthy but doesn't look like bayes poison.
>
><headers>
>Microsoft Mail Internet Headers Version 2.0
>Received: from mail2.adventureaquarium.com ([10.0.0.205]) by
>MAIL-I.adventureaquarium.com with Microsoft SMTPSVC(5.0.2195.6713);
> Thu, 8 Jun 2006 08:05:21 -0400
>Received: (qmail 31386 invoked from network); 8 Jun 2006 12:05:21 -0000
>Received: from [EMAIL PROTECTED] by
>mail2.adventureaquarium.com by uid 503 with qmail-scanner-1.20
> (clamdscan: 0.88.2/1467. spamassassin: 3.1.1.
>Clear:RC:0(66.148.73.132):SA:0(2.2/7.5):.
> Processed in 0.48126 secs); 08 Jun 2006 12:05:21 -0000
>X-Spam-Status: No, hits=2.2 required=7.5
>X-Qmail-Scanner-Mail-From: [EMAIL PROTECTED] via
>mail2.adventureaquarium.com
>X-Qmail-Scanner: 1.20 (Clear:RC:0(66.148.73.132):SA:0(2.2/7.5):.
>Processed in 0.48126 secs)
>Received: from unknown (HELO 192.168.0.4) (66.148.73.132)
> by mail2.adventureaquarium.com with SMTP; 8 Jun 2006 12:05:21 -0000
>Received: from crysholgh.com (9.13.1/9.13.1) id XAA37462; Thu, 08 Jun
>2006 05:05:20 -0800
>Message-Id: <[EMAIL PROTECTED]>
>From: "Marcelino Crews" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: this weeks stock pick KMAG - build a strong position now
>X-Mailer: Opera/6.05 (Windows 2000; U) [fi]
>Date: Thu, 08 Jun 2006 05:05:20 -0800
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="Boundary-00=_9HReE4jIy7jpiF0"
>Content-Transfer-Encoding: 7bit
>Content-Disposition: inline
>To: [EMAIL PROTECTED]
>Subject: this weeks stock pick KMAG - build a strong position now
></headers>
>
>Maybe gmail has an open relay? Or does this look like something else?
>
>Jason
>
Spam, from Gmail? Who would have ever believed it!
Plenty of spam does come through Gmail, but yours looks like
it came from HopOne (i.e. IP 66.148.73.132). If you apply the needed
27,000 patches to qmail, you can actually get it to refuse garbage
HELO/EHLO arguments like the '192.168.0.4' that is came in with (or
client hosts with no rDNS, etc.); Or you could update to a MTA which
is supported by its author(s) still.
Paul Shupak
[EMAIL PROTECTED]
