Why'd baddns hit? I'm confused.
Dan
Report:
Content analysis details: (5.9 points, 5.6 required)
pts rule name description
---- ----------------------
--------------------------------------------------
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=67.104.179.147,rdns=gadental.org,maildomain=gadental.org,baddn
s]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
0.9 AWL AWL: From: address is in the auto white-list
Research:
Mail from some user at gadental.org
dig mx gadental.org says:
gadental.org. 86400 IN MX 10 mail.gadental.org.
mail.gadental.org. 86369 IN A 67.104.179.147
dig -x 67.104.179.147 says:
147.179.104.67.in-addr.arpa. 10253 IN PTR gadental.org.
Original Headers:
X-Envelope-From:<[EMAIL PROTECTED]
Received: from mail.gadental.org [67.104.179.147] by mail.visioncomm.net
with ESMTP
(SMTPD32-8.15) id A16054AA0026; Thu, 03 Jan 2008 15:11:12 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----_=_NextPart_001_01C84E44.C90EB46D"
Subject: FW:
Date: Thu, 3 Jan 2008 15:10:34 -0500
Message-ID: <[EMAIL PROTECTED]>
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Thread-Index: Acg8BiV4u1PQlxPHRNazBNw4v2rAwASPlnIA
From: "Lisa Chandler" <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <'[EMAIL PROTECTED]'>
Cc: "Delaine Hall" <[EMAIL PROTECTED]>
