http://www.dnsstuff.com/tools/ip4r.ch?ip=205.138.96.41
The second E-mail looks to be severely munged and has no Declude headers. Check your IMail and JunkMail logs for this message and post what you find. I'm guessing that IMail didn't pass this to Declude, and this might have occurred while rebooting the machine or restarting the SMTP service (a known bug in IMail).
It does really help knowing more than just what's on the surface, especially if you are going to give someone good advise, so take what I have said with a grain of salt.
Matt
Bennie wrote:
Hello all,
I just received an email with the following headers...
Received: from mx1.myoffer2u.com [205.138.96.41] by mail.pepperlink.net with ESMTP (SMTPD32-8.05) id A8B120AA00BA; Tue, 09 Mar 2004 17:44:01 -0500 Received: from centramedia.net (205.138.96.41) by mx1.myoffer2u.com (PowerMTA(TM) v1.5); Tue, 9 Mar 2004 14:51:09 -0800 (envelope-from <[EMAIL PROTECTED]>) From: terry <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: hey bgc No Dor's Appointment Needed 3/9/2004 14:51:09 Reply-To: terry <[EMAIL PROTECTED]> Date: 09 Mar 2004 14:51:09 -0800 Message-ID: <[EMAIL PROTECTED]> MTA: YmdjQHBlcHBlcmxpbmsubmV0 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 205.138.96.41 with no reverse DNS entry. X-RBL-Warning: WEIGHT10: Weight of 11 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [205.138.96.41] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: AHBL, REVDNS, WEIGHT10 [11] X-Note: QueInControl: D48b120aa00ba47ae.SMD (1) X-Spam-Tests-Failed: AHBL, REVDNS, WEIGHT10 [11] X-Note: RDNS Real Origin: [No Reverse DNS][205.138.96.41] X-Note: SMTP Real From: [EMAIL PROTECTED] X-Note: SMTP Real To: [EMAIL PROTECTED] X-Note: This E-mail was sent from [No Reverse DNS] ([205.138.96.41]). X-RBL-Warning: Total spam weight of this E-mail is 11. X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 378703842
Right after this I received an email that had no to and no from and here is the total email with headers....
From: Date: Tue, 9 Mar 2004 17:44:02 -0500 X-RCPT-TO: perlink.net> Status: U X-UIDL: 378703843
----IMA44c48b2.404e/mail.pepperlink.net Content-Type: text/plain; charset=us-ascii
Message delivered successfully to [EMAIL PROTECTED]
----IMA44c48b2.404e/mail.pepperlink.net Content-Type: message/delivery-status
Reporting-MTA: mail.pepperlink.net Final-Recipient: rfc8222;[EMAIL PROTECTED] Action: delivered Status: 2.0.0
----IMA44c48b2.404e/mail.pepperlink.net Content-Type: message/rfc822
Received: from mx1.myoffer2u.com [205.138.96.41] by mail.pepperlink.net with ESMTP (SMTPD32-8.05) id A8B120AA00BA; Tue, 09 Mar 2004 17:44:01 -0500 Received: from centramedia.net (205.138.96.41) by mx1.myoffer2u.com (PowerMTA(TM) v1.5); Tue, 9 Mar 2004 14:51:09 -0800 (envelope-from <[EMAIL PROTECTED]>) From: terry <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: hey bgc No Dor's Appointment Needed 3/9/2004 14:51:09 Reply-To: terry <[EMAIL PROTECTED]> Date: 09 Mar 2004 14:51:09 -0800 Message-ID: <[EMAIL PROTECTED]> MTA: YmdjQHBlcHBlcmxpbmsubmV0 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 205.138.96.41 with no reverse DNS entry. ----IMA44c48b2.404e/mail.pepperlink.net--
Could someone let me know what is going on here.. and could I add myoffer2u.com to my kill list and catch these...
Bennie
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
