J.D. Falk writes: > > Received: from 211.22.252.2 ([211.34.23.194]) > > by l-daemon (iPlanet Messaging Server 5.1 (built May 7 2001)) > > with SMTP id <0GVV00EHQYAM7T@l-daemon> for [EMAIL PROTECTED]; Fri, > > 10 May 2002 02:02:01 -0600 (MDT) > > The iPlanet Messaging Server doesn't identify itself here, > but we can assume it's the same one @shaw.ca shown in the > second header up top. So, shaw.ca (your ISP) got the message > from 211.22.252.2.
Close. It's calling itself 211.22.252.2 when it knocks on the door, but it's lying. It's really 211.34.23.194, which is in Korea, not Hong Kong. Same difference, from a spam perspective. Both places (in fact almost the entire 211.x.x.x netblock) are filled to bursting with open relays and proxies, just waiting to be raped by spammers. Of course, when I blocked everything from 211 I got a complaint the very next day from a coworker whose friend in Japan got blocked out. Go figure. That's still the only email anyone here has ever received that was not spam. I feel REALLY sorry for legitimate users who are in KORNET IP space..... _______________________________________________ spamcon-general mailing list [EMAIL PROTECTED] http://mail.spamcon.org/mailman/listinfo/spamcon-general#subscribers Subscribe, unsubscribe, etc: Use the URL above or send "help" in body of message to [EMAIL PROTECTED] Contact administrator: [EMAIL PROTECTED]
