Goran Jovanovic wrote:
This is parts of a header I received and I just want to check a few
things
So the spammer thought that he would use my IP address in the HELO line
205.150.108.8 to identify his domain, even though his real IP address is
220.185.227.109?
Obviously an IP address is not a
OK I think I was somehow reversed in my tinking
Goran Jovanovic
The LAN Shoppe
Goran Jovanovic wrote:
This is parts of a header I received and I just want to check a few
things
So the spammer thought that he would use my IP address in the HELO
line
205.150.108.8 to
I use the forgedhelo filter
checks that remote server helo is neither your hostname nor your host IP
you can score this test realy high since no server should use the above.
HELO 0 CONTAINS ip1.ip2.ip3.
HELO 0 ENDSWITH cefib.com
HELO 0 ENDSWITH cefib.net
- Original Message -
From:
Serge,
I use the forgedhelo filter
HELO 0 CONTAINS ip1.ip2.ip3.
HELO 0 ENDSWITH cefib.com
HELO 0 ENDSWITH cefib.net
I assume that this forgedhelo filter is of your own making?
Since I am scanning mail for many domains I could add all their domains
to my list since they are never sending
PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, April 21, 2004 3:41 AM
Subject: RE: [Declude.JunkMail] HELOBOGUS, HELOISIP and HELOISIPX questions
Serge,
I use the forgedhelo filter
HELO 0 CONTAINS ip1.ip2.ip3.
HELO 0 ENDSWITH cefib.com
HELO 0 ENDSWITH cefib.net
I assume that this forgedhelo
