I have this email that was reported by spamcop because one of our client machines seems to be insecure. It is not an open relay, but with so many servers it passed through, how can I tell what caused it to be sent through?
Return-path: <[EMAIL PROTECTED]> <-- this domain is local to client ## Received: from ms-mta-02-eri0 (ms-mta-02-eri0 [10.25.8.235]) by ms-mss-04.southeast.rr.com (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003)) with ESMTP id <[EMAIL PROTECTED]>; Thu, 10 Jun 2004 14:56:02 -0400 (EDT) Received: from nymx03.mgw.rr.com (nymx03.mgw.rr.com [24.92.226.164]) by ms-mta-02.southeast.rr.com (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003)) with ESMTP id <[EMAIL PROTECTED]>; Thu, 10 Jun 2004 14:56:02 -0400 (EDT) Received: from miarsdqta.com (99-212-158-208.solidspace.com [208.158.212.99] (may be forged))<-- client box by nymx03.mgw.rr.com (8.12.10/8.12.8) with SMTP id i5AItqfe008263; Thu, 10 Jun 2004 14:55:53 -0400 (EDT) Date: Thu, 10 Jun 2004 18:33:42 +0000 (GMT) From: [EMAIL PROTECTED] Subject: Wer an ein Tabu ruehrt, muss und darf vernichtet werden (Id:8617) Message-id: <[EMAIL PROTECTED]> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7bit Importance: Normal X-Priority: 3 (Normal) X-Virus-Scanned: Symantec AntiVirus Scan Engine To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
