Well then I thank both you and Phillip Hutchings for the information.

-----Original Message-----
From: Malcolm Weir [mailto:[EMAIL PROTECTED] 
Sent: Monday, September 22, 2003 8:06 PM
To: Stephen Reese
Subject: RE: [courier-users] Re: how to close courier-mta open relay - I
need help on this issue also


> -----Original Message-----
> From: Stephen Reese
> Sent: Monday, September 22, 2003 3:53 PM

> Well i'm having similar issues, all types of problems getting mail 
> from *.microsoft *.newletters.com address's myself

You don't have an open relay...

> here's one header:
>
>
> Delivered-To: [EMAIL PROTECTED]
> Return-Path: <[EMAIL PROTECTED]>
> Received: from ms-smtp-02.nyroc.rr.com (ms-smtp-02.nyroc.rr.com
> [::ffff:24.92.226.49])
>   by prcdigital.com with esmtp; Mon, 22 Sep 2003 18:35:40 -0400
> Received: from jkcuchh (syr-24-58-136-138.twcny.rr.com
[24.58.136.138])
>       by ms-smtp-02.nyroc.rr.com (8.12.5/8.12.2) with SMTP id 
> h8MMMjuC027321;
>       Mon, 22 Sep 2003 18:22:46 -0400 (EDT)
> Date: Mon, 22 Sep 2003 18:22:45 -0400 (EDT)
> Message-Id: <[EMAIL PROTECTED]>
> FROM: "Program Security Division" <[EMAIL PROTECTED]>
> TO: " " <[EMAIL PROTECTED]>
> SUBJECT: Net Critical Pack
> Mime-Version: 1.0
> Content-Type: multipart/mixed; 
> boundary="=_prcserver.prcdigital.com-17567-1064270148-0001-2"

And your point is?

SWEN is hitting you.  That is a BCC to you using totally fake FROM and
TO headers, with an envelope wrapper specifying your name.

> here's another one:
>
> Delivered-To: [EMAIL PROTECTED]
> Return-Path: <[EMAIL PROTECTED]>
> Received: from ms-smtp-02.nyroc.rr.com (ms-smtp-02.nyroc.rr.com
> [::ffff:24.92.226.49])
>   by prcdigital.com with esmtp; Mon, 22 Sep 2003 18:44:48 -0400
> Received: from szwz (syr-24-58-136-138.twcny.rr.com [24.58.136.138])
>       by ms-smtp-02.nyroc.rr.com (8.12.5/8.12.2) with SMTP id 
> h8MMY5uC018988;
>       Mon, 22 Sep 2003 18:34:05 -0400 (EDT)
> Date: Mon, 22 Sep 2003 18:34:05 -0400 (EDT)
> Message-Id: <[EMAIL PROTECTED]>
> FROM: "Microsoft Net Email Service" <[EMAIL PROTECTED]>
> TO: "Inet Recipient" <[EMAIL PROTECTED]>
> SUBJECT: Letter
> Mime-Version: 1.0
> Content-Type: multipart/alternative; 
> boundary="=_prcserver.prcdigital.com-17645-1064270694-0001-2"

> I know there being sent from my machine sometimes since there not even

> passing through spamassassin when coming in or they would look like 
> the
> following:

Errrr... what do you THINK those "Received: from" lines are telling you?

They both originated from IP address 24.58.136.138 (which looks like a
RoadRunner customer in Syracuse, NY).

> Delivered-To: [EMAIL PROTECTED]
> Return-Path: <[EMAIL PROTECTED]>
> Received: from prcdigital.com ([::ffff:66.35.133.92])
>   (AUTH: LOGIN clinke)
>   by prcdigital.com with esmtp; Mon, 22 Sep 2003 16:58:37 -0400
> Message-ID: <[EMAIL PROTECTED]>
> Date: Mon, 22 Sep 2003 16:56:47 -0400
> From: Chris Linke <[EMAIL PROTECTED]>
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) 
> Gecko/20030624 Netscape/7.1 (ax)
> X-Accept-Language: en-us, en
> MIME-Version: 1.0
> To: Stephen Reese <[EMAIL PROTECTED]>
> Subject: Re: new phone number
> References: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> Content-Type: multipart/alternative;  
> boundary="------------000504080604010108090208"
> X-Spam-Status: No, hits=-0.8 required=5.0
>       tests=EMAIL_ATTRIBUTION,HTML_20_30,HTML_FONT_COLOR_BLUE,
>             HTML_MESSAGE,IN_REP_TO,MAILTO_TO_SPAM_ADDR,
>             QUOTED_EMAIL_TEXT,REFERENCES,REPLY_WITH_QUOTES,
>             USER_AGENT_MOZILLA_UA,X_ACCEPT_LANG
>       version=2.55
> X-Spam-Level:
> X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)

All that means is that your SpamAssassin setup isn't examining all your
mail.  By the way, you should be aware that SA 2.55 still believes in
Osirus RBL, which is a Bad Thing in that that list has been closed down
in a very petulant fashion...


Malc.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to