On 27 Jun 2004, at 00:28, Ron Johnson wrote:
Return-Path: [EMAIL PROTECTED]
Received: from p04.groups.msn.com ([65.54.195.216] verified)
by DakotaRainbow.com (Stalker SMTP Server 1.8b9d14)
with ESMTP id S.0000203918 for <[EMAIL PROTECTED]>; Fri, 25 Jun 2004 21:38:09 -0500
Received: from mail pickup service by p04.groups.msn.com with Microsoft SMTPSVC;
Fri, 25 Jun 2004 19:33:25 -0700
X-Originating-Ip: 207.68.170.30
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Your e-mail to [EMAIL PROTECTED] cannot be delivered
Date: Fri, 25 Jun 2004 19:33:24 -0700


Now, my question. I'm guessing this message is spam, therefore, I need to add an IP to my internal blacklist. Which one do I use? I have two choices: 65.54.195.216, (the first IP listed in the header)

the only IP stalker sees.

or 207.68.170.30 (the second IP listed). If I'm not mistaken, you guys always say that the first IP is the only one you can trust, and that's the one I've been adding to my blacklist, which now contains around 100 IPs. I know I've asked this question before, but I'm just making sure. TIA!

This is not a spam, it is a forged sender bounced spam. You are blacklisting msn's servers, but they did not originate the spam, the merely bounced it to the (forged) From: after failing to deliver it.


--
MEGAHAL: within my penguin lies a torrid story of hate and love.


############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>



Reply via email to