don't think it was the HELO line)
what else could it be? The only ID of the remote machine is the PTR query and it HELO hostname.
and the IP address (as found in the packet data)
IP of the SMTP client
. Not sure if that makes it a 'bad' header, or just different (I think it is better...yea, you have to look, but it told you what you needed to know. If it had done a ptr, and nothing found, what would go there?).
see above, either the PTR as label.domain.tld[a.bc.d] or unknown[a.b.c.d] and the helo hostname.
Len
_____________________________________________________________________ http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
