what am I dealing with here?

[admin at lctn.org]

>If you still want it then make sure you do not give them any credit by 
>giving negative spam points for having a valid DKIM header for example. 

>This is a config problem on your host. It should not list a loopback 
>address with your hostname attached to it. 

Thanks much for the comments. I was messing with the host settings a few days ago, and didn't realize I had left the loopback address in place. Fixed that now. 

As far as blocking Yahoo, that is not a viable solution, since I cannot dictate who can send mail to the 20 school districts I manage. I had lost the doc that was sent to me from the school that has noticed the issue. I retrieved it last night, and was looking over the header info. Two that I looked at had bogus to, and from info, so I am not sure how it even ended up at the school. That was the info I meant to send with my first post. It almost seemed like the sender was bouncing off of my server, but I don't see any indication the server has been compromised. I included one header below. 


Received: from relay-4.lctn.org [64.8.148.4] by kms.k12.mn.us with ESMTP 
(SMTPD-9.22) id AECD01E4; Sat, 29 Mar 2008 06:58:05 -0500 
Received: from n78.bullet.mail.sp1.yahoo.com (n78.bullet.mail.sp1.yahoo.com [98.136.44.42]) 
by relay-4.lctn.org (Postfix) with SMTP id D27BB3800C8 
for <khippen at kms.k12.mn.us>; Sat, 29 Mar 2008 06:58:00 -0500 (CDT), Found to be clean 
Received: from [216.252.122.217] by n78.bullet.mail.sp1.yahoo.com with NNFMP; 29 Mar 2008 11:57:44 -0000 
Received: from [69.147.65.167] by t2.bullet.sp1.yahoo.com with NNFMP; 29 Mar 2008 11:57:44 -0000 
Received: from [127.0.0.1] by omp502.mail.sp1.yahoo.com with NNFMP; 29 Mar 2008 11:57:44 -0000 
X-Yahoo-Newman-Property: ymail-5 
X-Yahoo-Newman-Id: 223248.63370.bm at omp502.mail.sp1.yahoo.com 
Received: (qmail 73645 invoked by uid 60001); 29 Mar 2008 11:57:44 -0000 
X-YMail-OSG: ya5jHRQVM1kffY18TagCnS1ihBmgHFS_ulpGyHyQwVzTfSAuwOoldZGW9FojvBQlb18qMfMvN3MuLoq2.KCS_I9XqZK55uVSh__twWr_vWlplfoIsNtigd_4tqzQvBZURj1aoqnNzHZtajobmri5AowZIdKwaTQKD3Ge0QbN0isrvH4.gsG2Y_G4dmDX4a6gkZiJ7skAFIn24wV0qGtnc4Qi8.lGhzxxES0uoVwZjA-- 
Received: from [77.218.62.119] by web45109.mail.sp1.yahoo.com via HTTP; Sat, 29 Mar 2008 04:57:43 PDT 
Date: Sat, 29 Mar 2008 04:57:43 -0700 (PDT) 
From: elke vanzanten <elkevanzanten3561 at yahoo.com> 
Subject: hey 
To: kelekia at interpac.net 
MIME-Version: 1.0 
Content-Type: multipart/alternative; boundary="0-1049636514-1206791863=:70178" 
Content-Transfer-Encoding: 8bit 
Message-ID: <8831.70178.qm at web45109.mail.sp1.yahoo.com> 
X-Spam-Status: No 
X-RCPT-TO: <khippen at kms.k12.mn.us> 
Status: ` 
X-UIDL: 436929799 
X-IMail-ThreadID: 2ecc00ca00001b26 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080401/2d20c1e0/attachment.html