Based on googles standard 'we don't have any clients who would email
from google' ignore bot, then what? if google doesn't have any direct
clients, then does this indicate they are running an open relay? (email
purports to come from Argentina (and
201.231.43.135 does.)
, RDNS for first untrusted looks like google. whois on netblock shows
google in US.
What types of emails (besides 'gmail.com' ) email is supposed to come
from google? are we going to start getting postini clients relayed
through google now?
If they don't even have a web site to report 'spam' or open relays to,
then how would you even contact them?
(this is the first untrusted received line).
maybe make a meta?
__FROM_GMAIL
__RCV_GOOGLE
and
GOOGLE_RELAY !__FROM_GMAIL && RCV_GOOGLE
Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.185])
by fl.us.spammertrap.net (Postfix) with ESMTP id F24DC2E116
for <[EMAIL PROTECTED]>; Mon, 25 Feb 2008 09:07:49 -0500 (EST)
Received: by rv-out-0910.google.com with SMTP id f5so1286176rvb.59
for <[EMAIL PROTECTED]>; Mon, 25 Feb 2008 06:07:47 -0800 (PST)
Received: by 10.140.251.1 with SMTP id y1mr2106744rvh.149.1203948466792;
Mon, 25 Feb 2008 06:07:46 -0800 (PST)
Received: from owcom2 ( [201.231.43.135])
by mx.google.com with ESMTPS id s54sm6210986rnb.10.2008.02.25.06.06.41
(version=SSLv3 cipher=RC4-MD5);
Mon, 25 Feb 2008 06:07:35 -0800 (PST)
Message-ID: <[EMAIL PROTECTED]>
From: "Gonzalo Caseres - Openware" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Openware Argentina
Date: Mon, 25 Feb 2008 12:01:07 -0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00AE_01C877A6.1A73C3D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Return-Path: [EMAIL PROTECTED]
--
Michael Scheidell, CTO
Main: 561-999-5000, Office: 561-939-7259
> *| *SECNAP Network Security Corporation
Winner 2008 Technosium hot company award.
www.technosium.com/hotcompanies/ <http://www.technosium.com/hotcompanies/>
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(tm).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
