<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6001.18294" name=GENERATOR></HEAD>
<BODY>
<DIV><!-- Converted from text/plain format --><FONT face=Arial size=2>First, our
sendmail servers are either incoming or outgoing for my company.
</FONT><FONT face=Arial size=2>The incoming sendmail servers REJECT any
messages coming in from any of our domains. To help keep spoofed messages
out of our environment, we reject around 35,000 spoofed messages combined per
day at the edge.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>So I have started to see what I show in the headers
below occasionally now. Can someone explain to me what is happening that
knows? And does anyone know how to remove this possibility from occurring?
I can't replicate the behavior below with a mail client externally, so I am
guessing it has to be specifically manipulated in a non RFC compliant
manner.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I don't understand how Mailscanner has the proper
From: listed in the x-header that this message came from, but there is an
x-header with the wrong From: that outlook then displays on a users client when
they open the message. (And any local Outlook rules act upon) If I check
the sendmail logs on the message below, it shows the message coming from <A
href="mailto:whereforeji09@maycruz.com">whereforeji09@maycruz.com</A>.
<BR></DIV>
<DIV> </DIV>
<DIV>Thanks for any help!</DIV>
<DIV> </DIV>
<DIV>Brian</DIV>
<DIV></FONT><FONT face=Arial size=2> </DIV></FONT>
<DIV><FONT face=Arial size=2>Received: from host-92-11-178-251.as43234.net
(host-92-11-178-251.as43234.net [92.11.178.251] (may be forged))<BR> by
callisto.kattenlaw.com (8.13.8/8.13.4) with ESMTP id
n84BFvwA012297;<BR> Fri, 4 Sep 2009 07:16:01 -0400<BR>Received: from
92.11.178.251 by 72.47.228.70; Fri, 4 Sep 2009 12:14:59 +0000<BR>Message-ID:
<<A
href="mailto:000d01ca2d50$f124e100$6400a8c0@whereforeji09">000d01ca2d50$f124e100$6400a8c0@whereforeji09</A>><BR>From:
Juliana Rollins <<A
href="mailto:caren.rabinowitz@kattenlaw.com">caren.rabinowitz@kattenlaw.com</A>><BR>To:
<<A
href="mailto:caren.rabinowitz@kattenlaw.com">caren.rabinowitz@kattenlaw.com</A>><BR>Subject:
Lose 12lbs in 1 month :.<BR>Date: Fri, 4 Sep 2009 12:14:59
+0000<BR>MIME-Version: 1.0<BR>Content-Type:
multipart/alternative;<BR> boundary="----=_NextPart_000_0007_01CA2D50.F124E100"<BR>X-Priority:
3<BR>X-MSMail-Priority: Normal<BR>X-Mailer: Microsoft Outlook Express
6.00.2800.1506<BR>X-MimeOLE: Produced By Microsoft MimeOLE
6.00.2800.1506<BR>X-Kattenlaw-MailScanner-Information:
<BR>X-MailScanner-SpamCheck: spam, spamcop.net, zen.spamhaus.org, cbl,
MAPS-ALL<BR>X-MailScanner-From: <A
href="mailto:whereforeji09@maycruz.com">whereforeji09@maycruz.com</A><BR>X-MailScanner-SPAM:
yes<BR>Return-Path: <A
href="mailto:whereforeji09@maycruz.com">whereforeji09@maycruz.com</A><BR>X-OriginalArrivalTime:
04 Sep 2009 11:16:13.0588 (UTC) FILETIME=[1D03F540:01CA2D51</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT
face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><BR><BR></DIV></BODY></HTML>
<table><tr><td bgcolor=#ffffff><font color=#000000>===========================================================<br>
CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the Internal Revenue Service, any tax advice contained herein is not intended or written to be used and cannot be used by a taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.<br>
===========================================================<br>
CONFIDENTIALITY NOTICE:<br>
This electronic mail message and any attached files contain information intended for the exclusive use of the individual or entity to whom it is addressed and may contain information that is proprietary, privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or distribution of this information may be subject to legal restriction or sanction. Please notify the sender, by electronic mail or telephone, of any unintended recipients and delete the original message without making any copies.<br>
===========================================================<br>
NOTIFICATION: Katten Muchin Rosenman LLP is an Illinois limited liability partnership that has elected to be governed by the Illinois Uniform Partnership Act (1997).<br>
===========================================================<br>
</font></td></tr></table>