Richard, You have asked this question several times before and if you review the answers, you have received just about every possible explanation as an answer. I would recommend STRONGLY that you research your IMail logs, and don't stop looking until you can nail down exactly where this is coming from and what Mail From information is being passed. Scott has given you information from a spam sample that should be easy enough to track back to a log file so as to expose this information. To do anything else would be to just simply guess, and apparently the past several guesses have been wrong so I recommend that you stop guessing, at least until it becomes more of an educated guess. Note that the actual IP source of the E-mail is not important because the spam hijackers have armies of zombies that they can use to bounce spam off of your server. The real problem is identifying how they are sending the E-mail, and the Mail From that they are sending under, which is exposed in your IMail logs, is the most obvious first place to start. When you find an example of the spam being sent, you might try posting all of the log entries for that E-mail to the list and asking for the best solution to fixing the problem or where to go from there. Matt Richard Farris wrote:
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== |
- [Declude.JunkMail] New IP4R lists available for ... Bill Landry
- Re: [Declude.JunkMail] New IP4R lists avail... Pete McNeil
- Re: [Declude.JunkMail] New IP4R lists a... Bill Landry
- RE: [Declude.JunkMail] New IP4R lis... Markus Gufler
- [Declude.JunkMail] Sender ID/SPF Kevin Bilbee
- [Declude.JunkMail] Blacklisted agai... Richard Farris
- Re: [Declude.JunkMail] Blacklis... Michael Graveen
- Re: [Declude.JunkMail] Blacklis... Darin Cox
- RE: [Declude.JunkMail] Blacklis... Matt
- RE: [Declude.JunkMail] Blacklis... Jeff Maze
- Re: [Declude.JunkMail] Bla... Larry Craddock
- Re: [Declude.JunkMail]... Richard Farris
- RE: [Declude.JunkMail] Blacklis... Chuck Schick
- Re: [Declude.JunkMail] Bla... Richard Farris
- Re: [Declude.JunkMail]... Richard Farris
- RE: [Declude.JunkM... John Tolmachoff \(Lists\)
- [Declude.JunkMail] ContainsIP with RDNS... Kevin Bilbee
- Re: [Declude.JunkMail] ContainsIP w... Pete McNeil
- RE: [Declude.JunkMail] Contains... Kevin Bilbee