agsteele Posted July 26, 2005 Share Posted July 26, 2005 I'm in the process of moving my mail servers to a new location and have only just reconfigured the mailhosts for my domain/Email address. So I was not entirely surprised to find a handful of legitimate messages caught in my held mail since the ip addresses didn't match with the held mail. However, on closer inspection it appears that the parser grabbed my new ip (22.214.171.124 in preference to the originating ip Here's the headers. Do we think this is correct parsing or should 126.96.36.199 have been identified? Andrew Return-Path: <JXUJSW[at]netscape.net> Delivered-To: spamcop-net-x Received: (qmail 4380 invoked from network); 26 Jul 2005 01:20:14 -0000 Received: from unknown (192.168.1.103) by blade2.cesmail.net with QMQP; 26 Jul 2005 01:20:14 -0000 Received: from smtp-relay02.x-mailer.co.uk (188.8.131.52) by mailgate2.cesmail.net with SMTP; 26 Jul 2005 01:20:14 -0000 Received: from [184.108.40.206] (helo=netwo-45832-001.dsvr.co.uk) by smtp-relay02.x-mailer.co.uk with esmtp id 1DxE7B-0002kc-Py for x; Tue, 26 Jul 2005 02:20:13 +0100 Received: from [220.127.116.11] (helo=18.104.22.168) by netwo-45832-001.dsvr.co.uk with smtp (Exim 4.43) id 1DxE78-0000c7-Rt for x; Tue, 26 Jul 2005 02:20:13 +0100 Received: from tptuwsrift9.netscape.net (22.214.171.124) by bos044-ug342.netscape.net with Microsoft SMTPSVC(5.0.2195.6824); Mon, 25 Jul 2005 20:18:01 -0600 Received: from Merlinz8vac67igd259scc (126.96.36.199) by gcnkhyby487.netscape.net (InterMail vM.5.01.06.05 859-013-395-837-128-432775) with SMTP id <998840854965872.IYHAE22.untsrco15442.netscape.net[at]editoroa77apn0g25ho> for <x>; Tue, 26 Jul 2005 04:16:01 +0200 Message-ID: <9596______________________oy07[at]Merlinli583fq85bf3zb> From: "Dorothea Berger" <JXUJSW[at]netscape.net> To: <x> Subject: Best Erection Drugs ! bestow Date: Tue, 26 Jul 2005 01:16:01 -0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--afloat" X-spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on blade2.cesmail.net X-spam-Level: **************** X-spam-Status: hits=16.1 tests=RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO, URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL, URIBL_WS_SURBL version=3.0.3 X-SpamCop-Checked: 192.168.1.103 188.8.131.52 184.108.40.206 X-SpamCop-Disposition: Blocked bl.spamcop.net ----afloat Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable Hello Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.