Jump to content
Sign in to follow this  
soczol

Untrusted host is trusted (?)

Recommended Posts

Full message: http://www.spamcop.net/sc?id=z469351039z1a...d8e1a3fb32a835z

The headers:

Received: from mx0.wanadoo.nl (mx0.wanadoo.nl [194.134.35.155])

  by pop05.wanadoo.nl (Postfix) with ESMTP id 1925F1C098

  for <x>; Sun,  9 May 2004 07:40:20 +0200 (CEST)

Received: by mx0.wanadoo.nl (Postfix)

  id 4E00E22E06; Sun,  9 May 2004 07:40:19 +0200 (MEST)

Received: from ool-435622c0.dyn.optonline.net (ool-435622c0.dyn.optonline.net [67.86.34.192])

  by mx0.wanadoo.nl (Postfix) with SMTP

  id CFD0122DFD; Sun,  9 May 2004 07:40:16 +0200 (MEST)

Received: from bavcloaxpfa.xwxjbadxozzz (gdqyctfuadauzxoc.tmpyfy.avqoibp [38.4.32.233])

Date: Sun, 09 May 2004 04:32:56 -0200

...

My logic:

- pop05.wanadoo.nl receives the message from mx0.wanadoo.nl (ok)

- mx0.wanadoo.nl receives the message from ool-435622c0.dyn.optonline.net (spammer)

.. and after that, the mailhosts config should prohibit the scri_pt from continuing, but instead it says:

0: Received: from mx0.wanadoo.nl (mx0.wanadoo.nl [194.134.35.155]) by pop05.wanadoo.nl (Postfix) with ESMTP id 1925F1C098 for <x>; Sun, 9 May 2004 07:40:20 +0200 (CEST)

Wanadoo received mail from Wanadoo ( 194.134.35.155 )

Hostname verified: mx0.wanadoo.nl

1: Received: from ool-435622c0.dyn.optonline.net (ool-435622c0.dyn.optonline.net [67.86.34.192]) by mx0.wanadoo.nl (Postfix) with SMTP id CFD0122DFD; Sun, 9 May 2004 07:40:16 +0200 (MEST)

Wanadoo received mail from Wanadoo ( 67.86.34.192 )

Hostname verified: ool-435622c0.dyn.optonline.net

2: Received: from bavcloaxpfa.xwxjbadxozzz (gdqyctfuadauzxoc.tmpyfy.avqoibp [38.4.32.233])

Wanadoo received mail from 38.4.32.233

So it actually says that that optonline.net host is Wanadoo? And it then thinks 38.4.32.233 is the spammer? :unsure:

Or is there something i'm missing here?

Edited by soczol

Share this post


Link to post
Share on other sites

Looks borked to me. bad parse, broken forged header ... yuck. Thanks

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×