Untrusted host is trusted (?)

[soczol]

Full message: http://www.spamcop.net/sc?id=z469351039z1a...d8e1a3fb32a835z

The headers:

Received: from mx0.wanadoo.nl (mx0.wanadoo.nl [194.134.35.155])

  by pop05.wanadoo.nl (Postfix) with ESMTP id 1925F1C098

  for <x>; Sun,  9 May 2004 07:40:20 +0200 (CEST)

Received: by mx0.wanadoo.nl (Postfix)

  id 4E00E22E06; Sun,  9 May 2004 07:40:19 +0200 (MEST)

Received: from ool-435622c0.dyn.optonline.net (ool-435622c0.dyn.optonline.net [67.86.34.192])

  by mx0.wanadoo.nl (Postfix) with SMTP

  id CFD0122DFD; Sun,  9 May 2004 07:40:16 +0200 (MEST)

Received: from bavcloaxpfa.xwxjbadxozzz (gdqyctfuadauzxoc.tmpyfy.avqoibp [38.4.32.233])

Date: Sun, 09 May 2004 04:32:56 -0200

...

My logic:

- pop05.wanadoo.nl receives the message from mx0.wanadoo.nl (ok)

- mx0.wanadoo.nl receives the message from ool-435622c0.dyn.optonline.net (spammer)

.. and after that, the mailhosts config should prohibit the scri_pt from continuing, but instead it says:

0: Received: from mx0.wanadoo.nl (mx0.wanadoo.nl [194.134.35.155]) by pop05.wanadoo.nl (Postfix) with ESMTP id 1925F1C098 for <x>; Sun, 9 May 2004 07:40:20 +0200 (CEST)

Wanadoo received mail from Wanadoo ( 194.134.35.155 )

Hostname verified: mx0.wanadoo.nl

1: Received: from ool-435622c0.dyn.optonline.net (ool-435622c0.dyn.optonline.net [67.86.34.192]) by mx0.wanadoo.nl (Postfix) with SMTP id CFD0122DFD; Sun, 9 May 2004 07:40:16 +0200 (MEST)

Wanadoo received mail from Wanadoo ( 67.86.34.192 )

Hostname verified: ool-435622c0.dyn.optonline.net

2: Received: from bavcloaxpfa.xwxjbadxozzz (gdqyctfuadauzxoc.tmpyfy.avqoibp [38.4.32.233])

Wanadoo received mail from 38.4.32.233

So it actually says that that optonline.net host is Wanadoo? And it then thinks 38.4.32.233 is the spammer?

Or is there something i'm missing here?

[Ellen]

Looks borked to me. bad parse, broken forged header ... yuck. Thanks