Mailing List SIMS@mail.stalker.com Message #10860
From: Paul Galati <pgalati@jackrouse.com>
Subject: Blacklisted IP's
Date: 13 May 2002 18:17:09 -0400
To: SIMS ListServer <SIMS@stalker.com>
X-Mailer: Mail*Link SMTP for Quarterdeck Mail; Version 4.1.0
SPAM RFC I recieved
------------------ RFC822 Header Follows ------------------
Received: by QD.JackRouse.com with ADMIN;13 May 2002 17:41:04 -0400
Received: from [200.49.223.2] (HELO emepacsi.emepacsi.com.ar) by JackRouse.com
(Stalker SMTP Server 1.8b8) with ESMTP id S.0001123836; Mon, 13 May 2002
17:41:06 -0400
Received: from smtp-gw-4.msn.com (203.163.155.122 [203.163.155.122]) by
emepacsi.emepacsi.com.ar with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.1960.3)
id KV3S7T0X; Sat, 11 May 2002 23:15:11 +0100
Message-ID: <00007d863194$00001e4a$00002a66@smtp-gw-4.msn.com>
To: <Undisclosed Recipients>
From: kenmyers@msn.com

SNIPPET from Blacklisted IP's
200.30.154.0      - 200.30.154.255
200.49.223.0      - 200.49.223.255
202.103.112.0     - 202.103.112.255

LOG transaction:
17:41:02 1 SMTP-086([200.49.223.2]) SPAM? Host is in the Blacklist
17:41:03 3 SMTP-086(emepacsi.emepacsi.com.ar) Failed to verify. Real address
is [200.49.223.2:1639]
17:41:04 1 SMTP-086([200.49.223.2]) SPAM? Recipient
'<webmaster@rousewyatt.com>' rejected: sending host is blacklisted
17:41:04 4 ROUTER mapped to email(RMorgan@QD.JackRouse.com)
17:41:04 4 ROUTER redirected to email(192.168.246.12) (safe)
17:41:04 1 SMTP-086([200.49.223.2]) SPAM? Recipient
'<lschelly@rousewyatt.com>' rejected: sending host is blacklisted
17:41:05 4 ROUTER mapped to email(PGalati@QD.JackRouse.com)
17:41:05 4 ROUTER redirected to email(192.168.246.12) (safe)
17:41:05 1 SMTP-086([200.49.223.2]) SPAM? Recipient '<rmorga@rousewyatt.com>'
rejected: sending host is blacklisted
17:41:05 1 SMTP-086([200.49.223.2]) SPAM? Recipient '<pgalati@rousewyatt.com>'
rejected: sending host is blacklisted
17:41:06 2 SMTP-086([200.49.223.2]) {S.0001123836} received, 3563 bytes
17:41:06 4 ROUTER mapped to email(RMorgan@QD.JackRouse.com)
17:41:06 4 ROUTER redirected to email(192.168.246.12) (safe)
17:41:06 4 ROUTER mapped to email(PGalati@QD.JackRouse.com)
17:41:06 4 ROUTER redirected to email(192.168.246.12) (safe)
17:41:06 2 SYSTEM [S.0001123836]
<00007d863194$00001e4a$00002a66@smtp-gw-4.msn.com> 2+0 From:kenmyers@msn.com
17:41:07 2 SMTP-085([192.168.246.12]) [S.0001123836] sent, 3385 bytes
17:41:07 2 SYSTEM(SMTP) [S.0001123836] sent to ([192.168.246.12])RMorgan
17:41:07 2 SYSTEM(SMTP) [S.0001123836] sent to ([192.168.246.12])PGalati
17:41:07 2 SYSTEM [S.0001123836] deleted


I did not modify the FRC header to conceal anything.  My only explanation is
that the spammer sent the email to Postmaster which is whiteholed and mapped
to my account.  Am I to assume that SIMS does NOT block IP addresses for
whiteholed addresses but router entries routed to error DO block even
whiteholed accounts

Please set me on straight.

*********************
Paul Galati
PGalati@JackRouse.com
*********************

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster