Enclosed are several headers taken directly from a main.mbx file on the IMail server.
(A few
internal names have been changed/protected.) The affected line starts with "X-Note:
SENT from" and
should show REVDNS and REMOTEIP. This only happens about once every 30 messages.
Keith Purtell, Web/Network Administrator
VantageMed Operations (Kansas City)
Email: [EMAIL PROTECTED]
CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole
use of the
intended recipient(s) and may contain confidential and privileged information. Any
unauthorized
review, use, disclosure or distribution is prohibited. If you are not the intended
recipient, please
contact the sender by reply email and destroy all copies of the original message.
>From <[EMAIL PROTECTED]> Thu Sep 11 10:27:28 2003
Received: from pimout4-ext.prodigy.net [207.115.63.103] by www.vantagemed.com with
ESMTP
(SMTPD32-8.02) id A44B8D01D0; Thu, 11 Sep 2003 10:27:07 -0500
Received: from vantagemed.com (adsl-65-69-197-121.dsl.hstntx.swbell.net
[65.69.197.121])
by pimout4-ext.prodigy.net (8.12.9/8.12.3) with ESMTP id h8BFXnaA147638
for <[EMAIL PROTECTED]>; Thu, 11 Sep 2003 11:33:50 -0400
Received: {(helo=namehere)
}}by vantagemed.com with smtp (Exim 3.35 #1)
id 19xTej-0007SY-00
for [EMAIL PROTECTED]; Thu, 11 Sep 2003 10:46:49 -0500
From: "namehere" <[EMAIL PROTECTED]>
To: "Keith Purtell" <[EMAIL PROTECTED]>
Subject: RE: Three accounts for Houston, licenses
Date: Thu, 11 Sep 2003 10:35:42 -0500
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-Mimeole: Produced By Microsoft MimeOLE V5.50.4910.0300
Importance: Normal
In-Reply-To: <[EMAIL PROTECTED]>
X-Declude-Sender: [EMAIL PROTECTED] [207.115.63.103]
X-Declude-Spoolname: D944b008d01d0c930.SMD
X-RBL-Warning: Total weight: 0
X-Tests-Failed: Whitelisted
X-Country-Chain:
X-Note: SENT from gemed.com>; Thu, 11 Sep 200 ([207.115.63.103]).
X-Note: Sender address: [EMAIL PROTECTED]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-UIDL: 350546558
>From <[EMAIL PROTECTED]> Thu Sep 11 11:03:15 2003
Received: from smtp4.pacifier.net [64.255.237.174] by www.vantagemed.com
(SMTPD32-8.02) id ACAC6E021A; Thu, 11 Sep 2003 11:02:52 -0500
Received: from station5 (unknown [207.202.152.65])
by smtp4.pacifier.net (Postfix) with SMTP id ADEB56B003
for <[EMAIL PROTECTED]>; Thu, 11 Sep 2003 09:05:51 -0700 (PDT)
From: "Diane" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: RE: Today's Upgrade and Licensing
Date: Thu, 11 Sep 2003 09:10:13 -0700
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Importance: Normal
In-Reply-To: <[EMAIL PROTECTED]>
X-Declude-Sender: [EMAIL PROTECTED] [64.255.237.174]
X-Declude-Spoolname: D9cac006e021a8214.SMD
X-RBL-Warning: Total weight: 0
X-Tests-Failed: Whitelisted
X-Country-Chain:
X-Note: SENT from d.com>; Thu, 11 Sep 2003 09 ([64.255.237.174]).
X-Note: Sender address: [EMAIL PROTECTED]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-UIDL: 350546568
>From <[EMAIL PROTECTED]> Wed Sep 10 15:36:58 2003
Received: from cs.ipswitch.com [156.21.1.4] by www.vantagemed.com with ESMTP
(SMTPD32-8.02) id AB51FF6019A; Wed, 10 Sep 2003 15:36:33 -0500
Received: from CAMPAIGN [156.21.1.4] by cs.ipswitch.com
(SMTPD32-8.02) id ABD23277031C; Wed, 10 Sep 2003 16:38:42 -0400
From: "Tamara Hart, Ipswitch" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
Subject: Your Ipswitch Newsletter - September Edition
Date: WED, 10 SEP 2003 16:38:42 -0400
MIME-Version: 1.0
Reply-To: [EMAIL PROTECTED]
Content-Type: multipart/alternative; boundary="Boundary.11111111.11111111"
X-Declude-Sender: [EMAIL PROTECTED] [156.21.1.4]
X-Declude-Spoolname: D8b510ff6019a8fbf.SMD
X-RBL-Warning: Total weight: 0
X-Tests-Failed: Whitelisted
X-Country-Chain:
X-Note: SENT from :42 -0400
From: "Tamara Ha ([156.21.1.4]).
X-Note: Sender address: [EMAIL PROTECTED]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-UIDL: 350546459
>From <[EMAIL PROTECTED]> Wed Sep 10 16:28:19 2003
Received: from outgoing3.securityfocus.com [205.206.231.27] by www.vantagemed.com with
ESMTP
(SMTPD32-8.02) id A75B97C01D0; Wed, 10 Sep 2003 16:27:55 -0500
Received: from lists.securityfocus.com (lists.securityfocus.com [205.206.231.19])
by outgoing3.securityfocus.com (Postfix) with QMQP
id DFD90A35FA; Wed, 10 Sep 2003 14:10:37 -0600 (MDT)
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:[EMAIL PROTECTED]>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <mailto:[EMAIL PROTECTED]>
Delivered-To: mailing list [EMAIL PROTECTED]
Delivered-To: moderator for [EMAIL PROTECTED]
Received: (qmail 1163 invoked from network); 10 Sep 2003 13:30:25 -0000
Message-Id: <[EMAIL PROTECTED]>
From: "Dan Harkless" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Permitting recursion can allow spammers to steal name server resources
In-Reply-To: Your message of "Tue, 09 Sep 2003 22:52:50 EDT."
<[EMAIL PROTECTED]>
Date: Wed, 10 Sep 2003 12:29:57 -0700
X-Declude-Sender: [EMAIL PROTECTED] [205.206.231.27]
X-Declude-Spoolname: D975b097c01d0949c.SMD
X-RBL-Warning: Total weight: 0
X-Tests-Failed: Whitelisted
X-Country-Chain:
X-Note: SENT from n his article,
which raise ([205.206.231.27]).
X-Note: Sender address: [EMAIL PROTECTED]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-UIDL: 350546480
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
> Sent: Monday, September 08, 2003 4:36 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Strange header from REVDNS
> and REMOTEIP
>
>
>
> >Well, I'm using Outlook 2000, and the only thing at the
> level of my PC
> >which might influence the
> >headers is a piece of software which changes incoming HTML
> email into
> >plain text. If you think it'll
> >make a difference, I can try to retrieve one of these via
> IMail's Web
> >Messaging, before my local
> >client gets hold of it??
>
> If it is possible, that would be helpful. IMail's web
> messaging won't
> alter the headers at all, so that should provide the best results.
>
> -Scott
>
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
