Who is spoofing our MX gateway as @sender.domain and adding fictional "Administrator"?? and then posting to this list?
who is meganet?
# dig -x 216.237.97.94
; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; QUERY SECTION:
;; 94.97.237.216.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
94.97.237.216.in-addr.arpa. 1D IN PTR ip29.intmatters.prv.ri.meganet.net.
On your home page: "God Bless America",
and can you pick up on this "sensitive content": "godd*mn Your Mail Admin" :))
Len
====================
Received: from postoffice.internalmatters.com [216.237.97.94] by list.ipswitch.com with ESMTP
(SMTPD32-7.12) id ACB884EE0252; Mon, 11 Nov 2002 09:20:40 -0500
Received: from mail pickup service by postoffice.internalmatters.com with Microsoft SMTPSVC;
Mon, 11 Nov 2002 09:00:57 -0500
thread-index: AcKJisI3Tzpgbb6SQdiyfGgnEVtHig==
Thread-Topic: ScanMail Message: To Recipient Match eManager setting and take action.
From: <[EMAIL PROTECTED]>
X-Sender: <Administrator>
To: <[EMAIL PROTECTED]>
**************** eManager Notification ***************** The following mail was blocked since it contains sensitive content.
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
