On Wed, Mar 23, 2011 at 11:56 AM, mouss <mo...@ml.netoyen.net> wrote:
> 1) nothing in your sample shows that you use postfix.
> if using postfix, why is Return-Path in the middle of headers?
>
> 2) given the return-path you show, this is not backscatter. maybe you
> meant envelope sender forgery?
>
> 3) 93.85.177.92 is listed in ZEN and BRBL among other lists.
Thanks for the reply. Sorry - wrong headers, here is a better example
Received: from localhost (localhost [127.0.0.1]) by
mail-in2.{ourdomain}.net (Postfix) with ESMTP id 038A71278B for
<david@{ourdomain}.net>; Mon, 21 Mar 2011 16:21:11 +1300 (NZDT)
X-Virus-Scanned: Debian amavisd-new at mail-in2.{ourdomain}.net
Received: from mail-in2.{ourdomain}.net ([127.0.0.1]) by localhost
(mail-in2.{ourdomain}.net [127.0.0.1]) (amavisd-new, port 10024) with
ESMTP id AjP3fH4O3NNn for <david@{ourdomain}.net>; Mon, 21
Mar 2011 16:21:06 +1300 (NZDT)
Received-SPF: None (no SPF record) identity=helo;
client-ip=213.153.204.77; helo=smtp.prnet.com.tr; envelope-from=<>;
receiver=domains@{ourdomain}.net
Received: from smtp.prnet.com.tr (unknown [213.153.204.77]) by
mail-in2.{ourdomain}.net (Postfix) with ESMTPS id 97BBE12777 for
<domains@{ourdomain}.net>; Mon, 21 Mar 2011 16:21:04 +1300 (NZDT)
MIME-Version: 1.0
From: <postmaster@prnet.local>
To: <domains@{ourdomain}.net>
Date: Mon, 21 Mar 2011 05:25:02 +0200
Content-Type: multipart/report; report-type=delivery-status;
boundary="d011ae77-0e81-4180-8f36-55a4a8d8738f"
Content-Language: tr-TR
Message-ID: <2628b8a7-433a-4e0a-bb73-13460a834136@prnet.local>
In-Reply-To: <4c899952-38ad-4d53-be45-b0c63b4459e3@PRNETMAIL.prnet.local>
References: <4c899952-38ad-4d53-be45-b0c63b4459e3@PRNETMAIL.prnet.local>
Subject: Teslim Edilmedi: Welcoming speech
Return-Path: <>
DV:3.3.8414.660;SV:3.3.8526.390;SID:SenderIDStatus Fail;OrigIP:210.48.80.145
