On 08/20, Michael Scheidell wrote: > Received: from mx1.secnap.com.ionspam.net ([204.89.241.253])
> and, like I said in earlier email, they even have the spf dns records wrong. > host -t txt mxtools.com > mxtools.com descriptive text "v=spf1 ip4:68.71.38.3 ip4:209.44.121.50 mx ~all" > > > so, what are you suggesting, someone HACKED into mxtools and is sending spam? What reason do you have to believe it's a legitimate email from spamhaus? Have you tried contacting spamhaus or mxtools about it? On 08/22, Michael Scheidell wrote: > looks like they have to use 68.71.38.2 because > 68.71.38.3 is in spamhaus's database: > [1]<http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a68.71.38.3> -- "You only truly own what you can carry at a dead run." http://www.ChaosReigns.com