Scott,

I'm going to guess that this is an issue with RFC compliance of Postini in how it includes the received headers, but the following headers shows a first hop that isn't being looked up consistently when one of our clients have E-mail being forwarded through a Postini protected host.
Received: from mail.pyramid.net [206.100.212.1] by mx1.mailpure.com with ESMTP
  (SMTPD32-8.05) id A35989BE0154; Thu, 16 Sep 2004 19:35:53 -0400
Received: from psmtp.com [12.158.34.32] by mail.pyramid.net
  (SMTPD32-8.11) id A3589E430150; Thu, 16 Sep 2004 16:35:52 -0700
Received: from source ([66.109.19.198]) by exprod5mx118.postini.com ([12.158.34.245]) with SMTP;
Thu, 16 Sep 2004 18:35:50 CDT
Received: by mailmw-gv3.movingwiththegreatest.com (PowerMTA(TM) v1.5); Thu, 16 Sep 2004 18:13:56 -0400 (envelope-from <[EMAIL PROTECTED]>)
Errors-To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
From: American Life Direct <[EMAIL PROTECTED]>
Subject: [14] Policy Approval in 10 Minutes. No Medical Exam
To: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="Boundary_QEukAfEOcdApulnRQWfFXx4rhvY"
Date: Thu, 16 Sep 2004 18:13:56 -0400

I've noted that Declude can handle special headers from some Web mail applications such as Hotmail so that the originating IP can be scanned, and it would be helpful if Declude could also make use of this format as well.  I haven't noticed this with any other type of server, but this is causing massive amounts of spam from this one forwarded account to either pass through or land in our Hold file where it makes review more difficult due to the extra volume.  All of the DNSBL tests are useless on these messages.  One might think that Postini would limit the amount of spam being passed for this account, but they suck :)

Thanks,

Matt
-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================


Reply via email to