On 3/31/11 3:27 PM, John Hardin wrote:
On Thu, 31 Mar 2011, Michael Scheidell wrote:
received:from smtp1.txfxczpw.net ([11169.98.12888.1258]) by
relay.cxjrc.com with SMTP; Thu, 31 Mar 2011 09:09:04 -0600
...aren't there any rules for invalid IPs like that? There don't
appear to be any that validate IPv4 limits. {boggle}
Were those headers raw? They're missing whitespace after the colon...
no, not really raw. my diagstuff lowercases the headers and takes out
whitespace.
there is a 'un(something) received header with a 0.01 score.
can post full on pastebin if someone really wants it, buy that
received header (and others like it) are in all of them.
Received: from 93-86-249-135.static.isp.telekom.rs
(93-86-249-135.static.isp.telekom.rs [93.86.249.135])
by redacted.com.ionspam.net (Postfix) with SMTP id 26F595C5EC1
for <redacted>; Thu, 31 Mar 2011 06:26:04 -0400 (EDT)
Received: from smtp1.yncxsgsf.net ([19788.88.17595.1255]) by
relay.xorni.com with SMTP; Thu, 31 Mar 2011 12:24:07 +0100
Message-ID: <6fd101cbef9e$881cc850$0301a8c0@as-3c64ed38cb03>
From: "DHL Global" <postservic...@dhl.com>
To: <redacted>
Subject: DHL Express Services
Date: Thu, 31 Mar 2011 12:21:56 +0100
Content-Type: multipart/mixed;
boundary="--------=_NextPart_000_0005_01CBEF9E.D2A0B5D0"
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation
* Best Intrusion Prevention Product, Networks Product Guide
* Certified SNORT Integrator
* Hot Company Award, World Executive Alliance
* Best in Email Security, 2010 Network Products Guide
* King of Spam Filters, SC Magazine
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
