Pardon my dimwitedness, but how is it that the X-Declude-Sender is <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] [209.216.98.30] ?
When I ping SMTP.REGSVR.NET I get "Bad IP address." When I ping just REGSVR.NET I get 209.216.98.7. When I ping SMTP203.LOCALSVR.NET I get 209.216.98.30.
How does Declude deduce this, and why? I thought the X-Declude-Sender was the Mail From: Schwarzenegger for Governor<<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]>
The key here is that the "Sender" is really the MAIL FROM in the SMTP envelope (the one in the "MAIL FROM:" line in the IMail SMTP log file). It may or may not be the same as the From: or Reply-To: headers.
In this case ("<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]"), it looks like a coded return address used to automatically remove E-mail addresses that bounce. SMTP.REGSVR.NET does have an MX record, so mail can get there (otherwise, it would have failed the MAILFROM test).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
