I've got a problem with spam that fakes our Email address in the header, example below...

Received: from kendra.com [213.182.166.7] by kendra.com
  (SMTPD32-6.06) id AEA89090136; Mon, 21 Jul 2003 14:44:08 -0700
From: "jenna knowly" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Take advantage of lower interest rates
Mime-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Date: ��, 22 ��� 2003 01:45:08 -0600
Content-Transfer-Encoding: 8bit
Abuse-Tracking: <Y21Ob1lXNWtiR1Z5UUd0bGJtUnlZUzVqYjIwPQ==>
Message-Id: <[EMAIL PROTECTED]>
X-Declude-Sender: [EMAIL PROTECTED] [213.182.166.7]
X-Spam-Tests-Failed: Whitelisted
X-Note: This E-mail was sent from [No Reverse DNS] ([213.182.166.7]).
X-Spam-Prob: 1.000000
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-Mozilla-Status: 8001
X-Mozilla-Status2: 00000000
X-UIDL: 332149997

It uses the intended To: address as the from address, I've got

WHITELIST REVDNS kendra.com

in global.cfg.

Any ideas, I've been searching the archives for a similar problem.

Rich




--------------
Rich Griebel
[EMAIL PROTECTED]
http://www.kendra.com
Scanned for Viruses using Declude and F-Prot



--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to