Hey all,
I received a piece of spam tonight, to myself from myself (supposedly).
I don't understand the SPF check: for the MAILFROM test, it indicates
[EMAIL PROTECTED] (result "none"). However, the From: is
clearly [EMAIL PROTECTED], which would have failed since I have SPF records
for zygoat.ca.
Where did the zyberphar.com domain come from? I thought the MAILFROM
SPF check matched against the From: field.
Full headers follow.
thanks,
-ben
X-Spam-Checker-Version: SpamAssassin 3.2.1-gr1-zygoat_pesto (2007-05-02) on
pesto.zygoat.ca
X-Spam-Level:
X-Spam-Status: No, score=-94.2 required=6.0 tests=HTML_IMAGE_RATIO_06,
HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RDNS_NONE,USER_IN_WHITELIST
autolearn=disabled version=3.2.1-gr1-zygoat_pesto
Received: from localhost (localhost [127.0.0.1])
(forwarded by [EMAIL PROTECTED])
by pesto.zygoat.ca with local; Mon, 28 Apr 2008 23:19:10 -0400
id 0032069E.481693AE.0000312A
Delivered-To: [EMAIL PROTECTED]
Received: from gecdsb.on.ca ([::ffff:199.71.141.254])
by pesto.zygoat.ca with esmtp; Mon, 28 Apr 2008 23:19:04 -0400
id 003204A2.481693A9.00003120
Received-SPF: none (Address does not pass the Sender Policy Framework)
SPF=HELO;
sender=gecdsb.on.ca;
remoteip=::ffff:199.71.141.254;
remotehost=;
helo=gecdsb.on.ca;
receiver=pesto.zygoat.ca;
Received-SPF: none (Address does not pass the Sender Policy Framework)
SPF=MAILFROM;
[EMAIL PROTECTED];
remoteip=::ffff:199.71.141.254;
remotehost=;
helo=gecdsb.on.ca;
receiver=pesto.zygoat.ca;
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Old-Return-Path: [EMAIL PROTECTED]
Received: (qmail 47823 by uid 521); Mon, 28 Apr 2008 11:19:06 -0500
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Get Your Free Shipping on Your $200 Shop
From: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Date: Mon, 28 Apr 2008 23:19:10 -0400
--
Ben Kennedy (chief magician)
zygoat creative technical services
http://www.zygoat.ca
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
