<html><head><style type='text/css'>p { margin: 0; }</style><style type='text/css'>body { font-family: 'Times New Roman'; font-size: 12pt; color: #000000}</style></head><body>I got a call from a school we scan mail for, complaining they are getting some inappropriate email, which is sailing through our scanner with a very low score.<br><br>I found the message shows it is being delivered by some other server from Venezuela, with our relay server listed second from the bottom. The header is not showing accurate information either on some of the messages, as far as To, and From<br><br> What can I do to shut this down? <br><br>I have included info from one of the messages.<br><br> IP Address Hostname Country RBL Spam Virus All 98.136.44.51 n75.bullet.mail.sp1.yahoo.com United States [ ] [ ] [ ] [ ]<br>216.252.122.218 t3.bullet.sp1.yahoo.com United States [ ] [ ] [ ] [ ]<br>69.147.65.156 omp404.mail.sp1.yahoo.com United States [ ] [ ] [ ] [ ]<br>127.0.0.1 relay-4.lctn.org (GeoIP Lookup Failed) [ ] [ ] [ ] [ ]<br>190.72.118.113 190-72-118-113.dyn.dsl.cantv.net Venezuela [ ] [ ] [ ] [ ]<br><br><br>ID: DDD5238001C.94591<br>Message Headers: Received: from n75.bullet.mail.sp1.yahoo.com (n75.bullet.mail.sp1.yahoo.com [98.136.44.51])<br> by relay-4.lctn.org (Postfix) with SMTP id DDD5238001C<br> for <khippen@kms.k12.mn.us>; Sun, 30 Mar 2008 15:52:54 -0500 (CDT)<br>Received: from [216.252.122.218] by n75.bullet.mail.sp1.yahoo.com with NNFMP; 30 Mar 2008 20:52:30 -0000<br>Received: from [69.147.65.156] by t3.bullet.sp1.yahoo.com with NNFMP; 30 Mar 2008 20:52:30 -0000<br>Received: from [127.0.0.1] by omp404.mail.sp1.yahoo.com with NNFMP; 30 Mar 2008 20:52:30 -0000<br>X-Yahoo-Newman-Property: ymail-5<br>X-Yahoo-Newman-Id: 493512.39708.bm@omp404.mail.sp1.yahoo.com<br>Received: (qmail 45004 invoked by uid 60001); 30 Mar 2008 20:52:30 -0000<br>DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;<br>s=s1024; d=yahoo.com;<br>h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;<br>b=b+ZjzHg4KHt6d2gKflATIw5TohQzUJ2lVPcqPbCiIzlU0n9Skvc3hKz2zcy7/3ZRkqvljZS5DQ7phzi/Dne1Ck4n86QHnd9NDrHSRSrACynu0T1/3K0SzFioRVRMWFoxXX2g8lOTbU3O49yfsL3f5JkzdTeCQe0YnugSXEdj3Qc=;<br>X-YMail-OSG: yeipdhMVM1lQDWuM.8hWb8yJBWFZbzK4JI34oV3jP0PoM3jGYlMQ8biezzdcUn_FkPMGvxIVHMnS7QiNtCYcm_FKjPDA.J.e1LI-<br>Received: from [190.72.118.113] by web45105.mail.sp1.yahoo.com via HTTP; Sun, 30 Mar 2008 13:52:30 PDT<br>Date: Sun, 30 Mar 2008 13:52:30 -0700 (PDT)<br>From: joie mudra <joiemudra4458@yahoo.com><br>Subject: hey<br>To: kensmith16123940@netscape.com<br>MIME-Version: 1.0<br>Content-Type: multipart/alternative; boundary="0-1647990638-1206910350=:30060"<br>Content-Transfer-Encoding: 8bit<br>Message-ID: <258826.30060.qm@web45105.mail.sp1.yahoo.com><br><br>-- <br>Raymond Norton<br>LCTN<br><br></body></html>