IPv6 or what ?

[michaelanglo]

Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6198599476zbdb6b09f3b76a6eadd9c5334550d0c4fz

Trusted site 207.46.100.253 received mail from 2a01:111:f400:7c09:0:0:0:183

IPv6 or what ?

And is the true source being reported ?

[gnarlymarley]

Assuming that opaltelecom.net is a forwarder as it is part of your mailhosts, both 207.46.100.253 and 2a01:111:f400:7c09:0:0:0:183 belong to hotmail/outlook.com (aka microsoft). So it would appear that the proper source is reporting correctly.

[michaelanglo]

Assuming that opaltelecom.net is a forwarder as it is part of your mailhosts, both 207.46.100.253 and 2a01:111:f400:7c09:0:0:0:183 belong to hotmail/outlook.com (aka microsoft). So it would appear that the proper source is reporting correctly.

But if Microsoft is trusted shouldn't mail.sccky.edu be reported as the spam source rather than 2a01:111:f400:7c09:0:0:0:183 breaking the chain ?

[petzl]

But if Microsoft is trusted shouldn't mail.sccky.edu be reported as the spam source rather than 2a01:111:f400:7c09:0:0:0:183 breaking the chain ?

X-Originating-IP: [206.162.175.122] Canada abuse[ at ]telus.com : CERT first[ at ]ewa-canada.comSpamCop often just reports the email server (which is good)Spammer often fake IP's

[lisati]

X-Originating-IP: [206.162.175.122] Canada abuse[ at ]telus.com : CERT first[ at ]ewa-canada.comSpamCop often just reports the email server (which is good)Spammer often fake IP's

Good call. It has been a while since I've had to manually analyze headers in order to figure out the appropriate reporting address, and the grey matter that works out the most trustworthy piece of info is at risk of wasting away!

[petzl]

Good call. It has been a while since I've had to manually analyze headers in order to figure out the appropriate reporting address, and the grey matter that works out the most trustworthy piece of info is at risk of wasting away!

SpamCop send reports to wrong ISP because of "legacy" issues where someone to lazy or don't know how or even spammer in 2004 changed their abuse address!

Reports routes for 206.162.175.122:

routeid: 10923202 206.162.128.0 - 206.162.191.255 to: abuse[at]globetrotter.net

Administrator interested in all reports

6/8/2004, 1:18:39 PM +1000

[Note added by 24.78.154.2, 24.66.94.142 (S010600045a22c670.ss.shawcable.net)]

Dale is wrong and was probably confused with our IP range.

The real thing is

66.110.128.0 - 66.110.159.255

207.134.0.0 - 207.134.255.255 exclusion of 207.134.74.0 - 207.134.95.255 to abuse[at]psi.net or abuse[at]telus.net

142.169.0.0 - 142.169.255.255

206.162.128.0 - 206.162.191.255

Sorry for the inconvenience it might have caused you.

Regards

Claude Labonté

Claude.labonte[at]telus.com

418 722 5501

-------------------------------------------------------------------

Can you please alter the contact email addresses for the following =

ranges to abuse[at]globetrotter.net?

66.110.x.x

207.134.x.x

142.169.x.x

206.162.x.x

Sincerely,=20

Dale

Internet Abuse Team

National Internet Services Support=20

TELUS Communications=20

http://www.telus.com/aup

Email: abuse[at]telus.com

-----------------------------------------------------------------------------------

-----Message d'origine-----

De : SpamCop/Richard [mailto:deputies[at]admin.spamcop.net]

Envoyé : 4 juin, 2004 03:02

À : Labonte, Claude

Objet : Re: Reports

Hi Claude,

We received the following email from Telus on June 1. This is why you are

receiving reports.

Richard

Please include all previous correspondence with replies