Vasiliy G Tolstov wrote: > Hello. Sometime i got strange spam e-mails like: > > Return-path: <[email protected]> > Envelope-to: [email protected] > Delivery-date: Wed, 19 Aug 2009 11:59:31 +0400 > X-SPF: none (irish-hostmasters.com) > X-DKIM: unsigned (irish-hostmasters.com) > Received: from [UNAVAILABLE] ([61.74.98.247]:49525 helo=WRNYQDXF) by > mxs.selfmail.ru with esmtp (Exim 4.69) (envelope-from > <[email protected]>) id 1Mdg4l-0003fP-KX for > [email protected]; Wed, 19 Aug 2009 11:59:30 +0400 > Received: from 61.74.98.247 by irish-hostmasters.com; Wed, 19 Aug 2009 > 16:58:40 +0900 > Message-ID: <000d01ca20a2$dda5c5a0$6400a...@gagesf0> > From: Domenick Reid <[email protected]> > To: <[email protected]> > Subject: =?koi8-r?B?78TOwSDOz97YIMkgz87BINTXz9EgzsHX08XHxME=?= > Date: Wed, 19 Aug 2009 16:58:40 +0900 > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_NextPart_000_0007_01CA20A2.DDA5C5A0" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2800.1106 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 > X-Evolution-Source: imap://vase%[email protected]/ > > > > Exim has spf check, but in this situation - From: [email protected] > (selfip.ru is my domain with -all spf record), but in spf check testing > irish-hostmasters.com ? Why? >
Because the envelope-from is [email protected] (line seen in your Received header) -- 010100100110010101101110011000010111010101100100 010000010110110001101100011000010111001001100100
smime.p7s
Description: S/MIME Cryptographic Signature
-- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
