On Tue, Jul 11, 2000 at 11:56:48AM -0600, Charles Cazabon wrote:
> Mate Wierdl <[EMAIL PROTECTED]> wrote:
> > Perhaps somebody can tell me how to deal with this: apparently a dynamic
> > IP connected to my server and dropped a message in one of the mailinglists's
> > mailbox. Or this is not a dynamic IP, but nonexistent one, and qmail got
> > fooled somehow?
> [...]
> > Return-Path: <[EMAIL PROTECTED]>
> [...]
> > Delivered-To: mailing list [EMAIL PROTECTED]
> [...]
> > From: <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
>
> It's an address without a valid reverse lookup -- common enough. The only
> thing I see different about this spam is that it's individually addressed
> to the mailing list, so it shows up in the To: header and the envelope
> recipient. If this is the case, there's no real way to distinguish this
> from legitimate email, unless you can catch it with the DUL.
I do run rblsmtpd with dul. The IP (207.100.21.156) does not exist---this
is why I thought it is a dynamic IP. How do I figure out which domain owns
it?
And is it possible that this IP is not connecting IP (could tcpserver be
fooled)?
Mate
