Untrusted host is trusted (?)

[soczol 0]

Full message: http://www.spamcop.net/sc?id=z469351039z1a...d8e1a3fb32a835z

The headers:

Received: from mx0.wanadoo.nl (mx0.wanadoo.nl [194.134.35.155])

  by pop05.wanadoo.nl (Postfix) with ESMTP id 1925F1C098

  for <x>; Sun,  9 May 2004 07:40:20 +0200 (CEST)

Received: by mx0.wanadoo.nl (Postfix)

  id 4E00E22E06; Sun,  9 May 2004 07:40:19 +0200 (MEST)

Received: from ool-435622c0.dyn.optonline.net (ool-435622c0.dyn.optonline.net [67.86.34.192])

  by mx0.wanadoo.nl (Postfix) with SMTP

  id CFD0122DFD; Sun,  9 May 2004 07:40:16 +0200 (MEST)

Received: from bavcloaxpfa.xwxjbadxozzz (gdqyctfuadauzxoc.tmpyfy.avqoibp [38.4.32.233])

Date: Sun, 09 May 2004 04:32:56 -0200

...

My logic:

- pop05.wanadoo.nl receives the message from mx0.wanadoo.nl (ok)

- mx0.wanadoo.nl receives the message from ool-435622c0.dyn.optonline.net (spammer)

.. and after that, the mailhosts config should prohibit the scri_pt from continuing, but instead it says:

0: Received: from mx0.wanadoo.nl (mx0.wanadoo.nl [194.134.35.155]) by pop05.wanadoo.nl (Postfix) with ESMTP id 1925F1C098 for <x>; Sun, 9 May 2004 07:40:20 +0200 (CEST)

Wanadoo received mail from Wanadoo ( 194.134.35.155 )

Hostname verified: mx0.wanadoo.nl

1: Received: from ool-435622c0.dyn.optonline.net (ool-435622c0.dyn.optonline.net [67.86.34.192]) by mx0.wanadoo.nl (Postfix) with SMTP id CFD0122DFD; Sun, 9 May 2004 07:40:16 +0200 (MEST)

Wanadoo received mail from Wanadoo ( 67.86.34.192 )

Hostname verified: ool-435622c0.dyn.optonline.net

2: Received: from bavcloaxpfa.xwxjbadxozzz (gdqyctfuadauzxoc.tmpyfy.avqoibp [38.4.32.233])

Wanadoo received mail from 38.4.32.233

So it actually says that that optonline.net host is Wanadoo? And it then thinks 38.4.32.233 is the spammer?

Or is there something i'm missing here?

Edited May 9, 2004 by soczol

[Ellen 0]

Looks borked to me. bad parse, broken forged header ... yuck. Thanks