This seems to be related to HELO/EHLO checks on spam from China spoofing verisigns domain.
 
20060525 224412 127.0.0.1       SMTPD (6b7b33fa013ae209) [59.56.132.196] MAIL FROM:<[EMAIL PROTECTED]>
20060525 224413 127.0.0.1       SMTPD (6b7d28620026e20d) [219.146.167.67] HELO verisign.com
20060525 224415 127.0.0.1       SMTPD (6b7f3af20032e210) [60.176.180.9] MAIL FROM:<[EMAIL PROTECTED]>
20060525 224416 127.0.0.1       SMTPD (6b7f33fb013ae211) [211.162.156.106] HELO verisign.com
20060525 224422 127.0.0.1       SMTPD (6b85278e0058e21a) [220.169.26.42] HELO verisign.com
20060525 224452 127.0.0.1       SMTPD (6ba33c490082e230) [218.0.0.98] HELO verisign.com
20060525 224455 127.0.0.1       SMTPD (6ba628690026e232) [220.249.96.60] HELO verisign.com
20060525 224503 127.0.0.1       SMTPD (6bae3c4d0082e23b) [61.168.10.230] HELO verisign.com
20060525 224508 127.0.0.1       SMTPD (6bac35e60100e239) [60.166.220.31] MAIL FROM:<[EMAIL PROTECTED]>
20060525 224520 127.0.0.1       SMTPD (6bbf286c0026e248) [218.76.21.31] HELO verisign.com
20060525 224521 127.0.0.1       SMTPD (6bc1422b0070e24b) [219.150.233.98] HELO verisign.com
20060525 224521 127.0.0.1       SMTPD (6bbf286c0026e248) [218.76.21.31] MAIL FROM:<[EMAIL PROTECTED]>
20060525 224522 127.0.0.1       SMTPD (6bc1422b0070e24b) [219.150.233.98] MAIL FROM:<[EMAIL PROTECTED]>
20060525 224522 127.0.0.1       SMTPD (6bc23af80032e24f) [222.161.34.114] HELO verisign.com
20060525 224524 127.0.0.1       SMTPD (6bc3422d0070e251) [218.249.220.194] MAIL FROM:<[EMAIL PROTECTED]>

Reply via email to