I've had a couple of reports that my messages were failing SPF. I sent a message to myself via a loop and am totally confused at the message header.

The message was actually sent from my computer on private IP 192.168.1.177 to my IMail server at 216.229.87.4. For some reason Declude reports that I sent the message from 216.229.64.74. That IP is one of our IP's, but not at this location and the message never touched that subnet.

What are your HOP, HOPHIGH, and IPBYPASS settings?

Top part of message header shows correct information:

Received: from source ([216.229.87.4]) by exprod6mx94.postini.com ([12.158.35.251]) with SMTP;
Thu, 22 Jul 2004 16:09:56 CDT
Received: from office [192.168.1.177] by mail.csimo.com
(SMTPD32-8.12) id AD281C400BE; Thu, 22 Jul 2004 16:10:00 -0500

Are there any further Received: headers are there?

X-Declude-Sender: <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] [216.229.64.74]
X-Note: This message was sent from 216-229-64-74-empty.fidnet.com ([216.229.64.74]).

Does the IP 216.229.64.74 appear anywhere in the headers?

What version of Declude JunkMail are you running?

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to