spf-discuss
[Top] [All Lists]

[spf-discuss] Forged From and No-SPF Return-Path with postfix spf.pl

2006-07-24 10:55:35
Hi. Question from new spf user. The email header below has a return-path to a spammer but a forged From of ebay.com. Why wasn't it REJECTED?

Thank you!

Robin

*** SPAM Header

From - Mon Jul 24 09:46:36 2006
X-Account-Key: account6
X-UIDL: 44bfc6620001db55
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <root(_at_)ns32885(_dot_)ovh(_dot_)net>
X-Original-To: robin(_dot_)rowe(_at_)movieeditor(_dot_)com
Delivered-To: rower(_at_)movieeditor(_dot_)com
Received: from ns32885.ovh.net (ns32885.ovh.net [213.251.163.196])
        by mail.movieeditor.com (Postfix) with SMTP id EEF792E74F8
        for <robin(_dot_)rowe(_at_)movieeditor(_dot_)com>; Mon, 24 Jul 2006 
11:38:00 -0500 (CDT)
Received: (qmail 906 invoked by uid 99); 24 Jul 2006 11:52:27 -0000
Date: 24 Jul 2006 11:52:27 -0000
Message-ID: 
<20060724115227(_dot_)905(_dot_)qmail(_at_)ns32885(_dot_)ovh(_dot_)net>
To: robin(_dot_)rowe(_at_)movieeditor(_dot_)com
Subject: FPA NOTICE: eBay Registration Suspension -Section 9-
From: eBay <no-reply(_at_)smtp03(_dot_)ebay(_dot_)com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Status:

*** Postfix log

Jul 24 11:38:00 D2795 postfix/smtpd[1036]: connect from ns32885.ovh.net[213.251.
163.196]
Jul 24 11:38:00 D2795 postfix/policy-spf[1122]: : SPF none: smtp_comment=SPF: domain of sender root(_at_)ns32885(_dot_)ovh(_dot_)net does not designate mailers, header_comment=c d.movieeditor.com: domain of root(_at_)ns32885(_dot_)ovh(_dot_)net does not designate permitted sender hosts Jul 24 11:38:00 D2795 postfix/policy-spf[1122]: handler sender_permitted_from: D
UNNO
Jul 24 11:38:00 D2795 postfix/policy-spf[1122]: decided action=DUNNO
Jul 24 11:38:00 D2795 postfix/smtpd[1036]: EEF792E74F8: client=ns32885.ovh.net[213.251.163.196] Jul 24 11:38:01 D2795 postfix/cleanup[1123]: EEF792E74F8: message-id=<2006072411
5227(_dot_)905(_dot_)qmail(_at_)ns32885(_dot_)ovh(_dot_)net>
Jul 24 11:38:01 D2795 postfix/qmgr[948]: EEF792E74F8: from=<root(_at_)ns32885(_dot_)ovh(_dot_)net
>, size=14296, nrcpt=1 (queue active)
Jul 24 11:38:01 D2795 postfix/local[1124]: EEF792E74F8: to=<rower(_at_)movieeditor(_dot_)com>, orig_to=<robin(_dot_)rowe(_at_)movieeditor(_dot_)com>, relay=local, delay=1, status=sent (delivered to mailbox)
Jul 24 11:38:01 D2795 postfix/qmgr[948]: EEF792E74F8: removed
Jul 24 11:38:01 D2795 postfix/smtpd[1036]: disconnect from ns32885.ovh.net[213.2
51.163.196]


###

-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your subscription, please go to http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com

<Prev in Thread] Current Thread [Next in Thread>