On 8/20/11 2:35 AM, Benny Pedersen wrote:
Resolved mxtools.com to 209.44.121.50
[mxtools.com has 1 MX record mail.mxtools.com.(10)]
is mxtools.com the envelope sender domain ?
Received: from mx1.secnap.com.ionspam.net ([204.89.241.253])
by mx1.secnap.com.ionspam.net (mx1.secnap.com.ionspam.net
[10.70.1.253]) (SpammerTrap(r) VPS-1500, port 10024)
with LMTP id mPxFFvk9MOgM for<x>;
Fri, 19 Aug 2011 21:20:09 -0400 (EDT)
Received: from smtp.mxtools.com (smtp.mxtools.com [68.71.38.2])
by mx1.secnap.com.ionspam.net (Postfix) with ESMTP id D94B5621D4C
for<x>; Fri, 19 Aug 2011 21:20:08 -0400 (EDT)
domainkey-signature: a=rsa-sha1; c=nofws; s=key1; d=mxtools.com; q=dns;
h=mime-version:from:to:reply-to:date:subject:content-type:content-transfer-encoding;
b=P9z1xKNeJT4cpJLtz2CgjBn749ClSpSdS3+k1dOdKbsJwhyF4zA9dQ2vdgmwXFJwWLislTxVAlWTt3qnabRJgkBk4IpwfjjIO7ZeNtEENZCNwkvyx3h1Ee9tUVDKjJzPTmPSmh5w7XRgz96Qm3WfeEGq9xps3jrv3VhjSvTM0ik=;
X-FBL: M2VkLjEyLmM2MDAwMDAwMDEzMmUzLmRucy1hZG1pbj1zZWNuYXAubmV0
MIME-Version: 1.0
From: "MXTools Spamhaus Team"<msm...@mxtools.com>
Reply-To: msm...@mxtools.com
and, like I said in earlier email, they even have the spf dns records wrong.
host -t txt mxtools.com
mxtools.com descriptive text "v=spf1 ip4:68.71.38.3 ip4:209.44.121.50 mx ~all"
so, what are you suggesting, someone HACKED into mxtools and is sending spam?
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
>*| *SECNAP Network Security Corporation
* Best Mobile Solutions Product of 2011
* Best Intrusion Prevention Product
* Hot Company Finalist 2011
* Best Email Security Product
* Certified SNORT Integrator
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
