I currently have my client's source IP's and their domains whitlisted. I am realizing that spam is getting through. If I interpret the headers correctly the mail below is coming from 85.71.84.125, which is somewhere in the world. It was scanned by my server before being delivered to my clients mail server as I take care of the spam scanning. Since I have @myclientsdomain.com whitelisted it got through to them. The target domain was invalid, however their server processed the BCC's that were in that mail and delivered mail to those addresses one of those was [EMAIL PROTECTED].
I want to tighten that up but am afraid to upset the apple cart here and trap mail that I should not. I know in the past I was trapping mail from legitimate source at my client as some of their software formed mail that made it look like spam to my configuration
Any guidance and help would be appreciated.
I run imail 8.22 with declude 4.2.3, sniffer and invuribl
Thank you
Received: from ntserver.heartlandapp.com [72.1.199.42] by intown.net with ESMTP
(SMTPD-8.22) id AE0003A0; Sun, 14 May 2006 14:59:12 -0400
Received: from intown.net ([216.16.233.12]) by ntserver.heartlandapp.com with Microsoft SMTPSVC(5.0.2195.6713);
Sun, 14 May 2006 14:59:13 -0400
Received: from 792352B8 [85.71.84.125] by intown.net
(SMTPD-8.22) id ADF103A0; Sun, 14 May 2006 14:58:57 -0400
Received: from 216.16.233.12 (localhost [127.0.0.1])
by 216.16.233.12
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED];
Sun, 14 May 2006 12:02:33 -0800
Received: from [154.212.180.108] (Forwarded-For: [242.208.166.108])
by 216.16.233.12 (mshttpd); Sun, 14 May 2006 12:02:33 -0800
Date: Sun, 14 May 2006 12:02:33 -0800
From: "Ladonna Parr" <[EMAIL PROTECTED]>
Subject: we offer degrees in less than 2 weeks
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
X-Mailer: iPlanet Messenger Express 5.2 HotFix 1.21 (built Sep 8 2003)
Content-type: text/plain; charset=us-ascii
Content-language: en
Content-transfer-encoding: 7Bit
Content-disposition: inline
Priority: normal
X-Declude-Sender: [EMAIL PROTECTED] [85.71.84.125]
X-Declude-Spoolname: D7dec003700009dd0.smd
X-Spam-Tests-Failed: Whitelisted [0]
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 14 May 2006 18:59:13.0629 (UTC) FILETIME=[7DCA10D0:01C67788]
X-Declude-Sender: [EMAIL PROTECTED] [72.1.199.42]
X-Declude-Spoolname: D7e0001e200009de4.smd
X-Note: Total spam weight of this E-mail is 0.
X-Note: Spam Tests Failed: Whitelisted
X-Note: REMOTEIP: 72.1.199.42
X-Note: REVDNS: dsl-72-1-199.042.tel-ott.com
X-Note: FROM: [EMAIL PROTECTED]
X-Note: TO: otherclient.com
X-Spam-Tests-Failed: Whitelisted [0]
X-RCPT-TO: <john@otherclient.com>
Status: U
X-UIDL: 428962690
X-IMail-ThreadID: 7e0001e200009de4
Harry Vanderzand
inTown Internet & Computer Services
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222
