spf-discuss
[Top] [All Lists]

RE: spam caught by spf

2004-02-01 10:36:53
Meng,

I don't know how close you are with AOL, but any chance they might change
their record to "-all"?  It would obviously help with the numbers....

Marc

-----Original Message-----
From: Meng Weng Wong [mailto:mengwong(_at_)dumbo(_dot_)pobox(_dot_)com]
Sent: Friday, January 30, 2004 12:24 AM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: [spf-discuss] spam caught by spf


I'd like to take a break from the usual back and forth to show off
a couple of spams SPF caught recently.

  X-Pobox-Antispam: Bad HELO hostname returned DENY: no MX or A records
found for coolre41520.com
  Received-SPF: fail (majesty.pobox.com: domain of
isaac_chuks(_at_)catchamail(_dot_)com does not designate 217.165.65.214 as 
permitted
sender)
  Old-Return-Path: <isaac_chuks(_at_)catchamail(_dot_)com>
  X-Pobox-Antispam: Sender Permitted From returned DENY: please see
http://spf.pobox.com/why.html?sender=isaac_chuks%40catchamail.com&ip=217.165
.65.214&receiver=majesty.pobox.com
  Received: from coolre41520.com (unknown [217.165.65.214])
          by majesty.pobox.com (Postfix) with SMTP
          for <mengwong(_at_)pobox(_dot_)com>; Thu, 29 Jan 2004 01:06:08 -0500 
(EST)

This first one wasn't caught by my blacklists; the only two tests that
matched were bad-helo and SPF.

The second one didn't match any blacklists at all, and was caught only
by SPF.  Even SpamAssassin didn't catch it.

  Received-SPF: fail (icicle.pobox.com: domain of 
notebooks(_at_)looking(_dot_)com does
not designate 64.70.191.120 as permitted sender)
  Old-Return-Path: <notebooks(_at_)looking(_dot_)com>
  X-Pobox-Antispam: spf returned DENY: please see
http://spf.pobox.com/why.html?sender=notebooks%40looking.com&ip=64.70.191.12
0&receiver=icicle.pobox.com
  Received: from dedicated.starbasesupremacy.com (unknown [64.70.191.120])
          by icicle.pobox.com (Postfix) with SMTP
          for <mengwong(_at_)pobox(_dot_)com>; Mon, 26 Jan 2004 15:12:21 -0500 
(EST)

This stuff really works.

Thank you catchamail.com and looking.com for publishing records.

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.5.txt
Wiki: http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/
To unsubscribe, change your address, or temporarily deactivate your
subscription, 
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.5.txt
Wiki: http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡


<Prev in Thread] Current Thread [Next in Thread>