On Sun, 23 Jan 2005 administrator(_at_)yellowhead(_dot_)com wrote:
How does one go about separating the Domain Name from the Fully Qualified
Domain Name. For example:
Connect from 207.217.120.150:48077
EHLO parakeet.mail.pas.earthlink.net
MAIL FROM:<spamblocker-challenge(_at_)bounce(_dot_)earthlink(_dot_)net>
SIZE=3269
RCPT TO:<prolatefseuy(_at_)mail(_dot_)yellowhead(_dot_)com>
This is a legitimate message (background bounce actually), but the HELO
Domain and the MAIL FROM: Domain will not pass an SPF test.
Nor would they fail. Which means the result is "unknown".
However, the actual Domain Name <earthlink.net> will.
But that is not what message is from.
BTW, if it were
<spambllocker-challenge(_at_)bounce1(_dot_)bounce(_dot_)earthlink(_dot_)net>
would you say domain name is bouce.earthlink.net or earthlink.net?
The point is you should not make an assumption that you can guess it
because when you're wrong there is chance you'll cause inappropriate
rejection (instead of just getting "neutral" answer).
--
William Leibzon
Elan Networks
william(_at_)elan(_dot_)net