Just noticed this pass through our spam filters ... is it whitelisted
because it forged our ip 207.211.1.10 in the HELO line?
I thought the IP tests would only look at the true IP, not the Hello?
If this is true, how can I tell why this was whitelisted to redefine a
test?
David
---------------
Received: from 207.211.1.10 [80.236.89.82] by stat.com
(SMTPD32-8.04) id A47B6EE01A6; Sat, 13 Dec 2003 14:28:27 -0700
Received: from g8gir.56sh1.com (HELO sby1) [86.241.18.32]
by 207.211.1.10;
Sun, 14 Dec 2003 01:29:10 +0400
Message-ID: <[EMAIL PROTECTED]>
From: "Dante Bacon" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL
PROTECTED]>, <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
Subject: Natural Health Now
Date: Sun, 14 Dec 03 01:29:10 GMT
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="._1D8F_1708EBA_0B_C6A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Declude-Sender: [EMAIL PROTECTED] [80.236.89.82]
X-Spam-Tests-Failed: Whitelisted [0]
X-Country-Chain: [IANA Reserved]->FRANCE->destination
X-Note: This E-mail was sent from ip-82.net-80-236-89.joinville.rev.numericable.fr
([80.236.89.82]).
X-Hello: 207.211.1.10
X-IMAIL-SPAM-PHRASE: human growth hormone
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-IMail-Rule: H~X-IMAIL-SPAM:spam Data- X-IMAIL-SPAM-PHRASE: human gro
X-UIDL: 364210276
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
