SA DNS log question

[Julian Field]

At 15:01 19/07/2002, you wrote:
>I get the following in my log:
>
>Jul 18 19:17:57 magnet mailscanner[28306]: Message g6INHZh17262 from
>12.64.128.192 (magnet.fsu.edu) is spam according to osirusoft.com ...
>
>My question is why is magnet.fsu.edu listed as the reverse lookup
>for 12.64.128.192?  Magnet.fsu.edu is my server and it is 146.201.250.2.
>Am I not be interpretting the log correctly?

The IP address is that of the far end of the SMTP connection.
The domain name given is taken from the sender's address in the message
envelope (the real "From" address).
--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ