> On Thu, May 29, 2008 15:15, Sujit Acharyya-Choudhury wrote: > > As requested full header is as follows: > > > > > > Microsoft Mail Internet Headers Version 2.0 > > Received: from isls-mx20.wmin.ac.uk ([161.74.14.113]) by > > isls-exch-be-1.intranet.wmin.ac.uk with Microsoft > > SMTPSVC(6.0.3790.3959); > > Tue, 27 May 2008 05:42:34 +0100 > > Received: from [124.236.241.119] (helo=gmail.com) > > by isls-mx20.wmin.ac.uk with esmtp (Exim 4.60) > > (envelope-from <[EMAIL PROTECTED]>) > > id 1K0r17-0005Sm-8b > > for [EMAIL PROTECTED]; Tue, 27 May 2008 05:42:34 +0100 > > Reply-To: [EMAIL PROTECTED] > > From: Feed Blaster > > To: [EMAIL PROTECTED] > > Subject: Feed Blaster puts your ad right to the screens of millions in 15 > Minutes ! > > Date: 26 May 2008 21:42:41 -0700 > > Message-ID: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > > Content-Type: multipart/mixed; > > boundary="----=_NextPart_000_0012_DAA36BB7.FAA31CFA" > > Return-Path: [EMAIL PROTECTED] > > X-OriginalArrivalTime: 27 May 2008 04:42:34.0297 (UTC) > > FILETIME=[14BC6A90:01C8BFB4]
On 29.05.08 15:39, Benny Pedersen wrote: > envelope seams to come from gmail.com so spf can reject this spam since its > not sent from gmail servers > > http://www.openspf.org/Why?s=mfrom&[EMAIL > PROTECTED]&ip=161.74.14.113&r=westminster.ac.uk which means you should turn on SPF control, and I recommend even DKIM and other newtwork rules (razor, pyzor, uribl and DCC if you can) -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Nothing is fool-proof to a talented fool.
