How did this spam make it through?

Kai Schaetzl maillists at CONACTIVE.COM
Fri Mar 18 16:31:25 GMT 2005


    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jeff Falgout wrote on         Thu, 17 Mar 2005 09:00:15 -0700:

> Did this spam get whitelisted because it saw it's ip address somewhere in 
> the first Recieved line and thought it came from itself?
>

Hm, looks like it did, but shouldn't have happened. Would just be to easy to 
get in the whitelist. We block this type of message right at MTA level with 
a small sendmail recipe, google for "sendmail faked helo" or so.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
IE-Center: http://ie5.de & http://msie.winware.org

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list