hi

mydomain.com email service on my server.

i recd a spam from [email protected], from the spammer's server.

the mailfrom shows as : [email protected]

Return-Path: <[email protected]>

i use spf qmail spf check at level 2

logically Received-SPF is supposed to show as spf failed, however it is showing 
as pass.

is it because of the envelope sender, ie Return-Path header ?

could you please let me know what additional steps i need to take to prevent 
such spam with mailfrom as my own domain.


Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: (qmail 23216 invoked by uid 89); 3 Dec 2014 12:25:54 -0000
Received: by simscan 1.4.0 ppid: 23141, pid: 23209, t: 1.2472s
     scanners: attach: 1.4.0 clamav: 0.98.4/m: spam: 3.3.2
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
     ns1.yyyyy.com
X-Spam-Level:
X-Spam-Status: No, score=0.9 required=5.0 
tests=HTML_MESSAGE,MIME_HTML_ONLY,T_REMOTE_IMAGE,URI_HEX,headerSPFPASS
     autolearn=disabled version=3.3.2
Received: from unknown (HELO etna.w2hosting.cz) (82.208.49.33)
     by ns1.yyyyy.com with SMTP; 3 Dec 2014 12:25:52 -0000
Received-SPF: pass (ns1.yyyyy.com: SPF record at lackdesign.cz designates 
82.208.49.33 as permitted sender)
Received: from etna.w2hosting.cz (localhost.localdomain [127.0.0.1])
     (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
     (No client certificate requested)
     by etna.w2hosting.cz (Postfix) with ESMTPS id 216B0C687F
     for <[email protected]>; Wed, 3 Dec 2014 13:25:43 +0100 (CET)
Received: (from apache@localhost)
     by etna.w2hosting.cz (8.14.4/8.14.4/Submit) id sB3CPgqc017685;
     Wed, 3 Dec 2014 13:25:42 +0100
Date: Wed, 3 Dec 2014 13:25:42 +0100
Message-Id: <[email protected]>
X-Authentication-Warning: etna.w2hosting.cz: apache set sender to 
[email protected] using -f
To: [email protected]
Subject: [ PayPal ] : About Your Account . #PP-ID = 68872897358073360
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: <[email protected]>

rajesh


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to