On Saturday 02 November 2002 10:17, Miguel Albuquerque wrote:
Evert Smit wrote:
See this:
by lagu.sidhe.net (8.11.6/8.11.6/SuSE Linux 0.5) with SMTP id gA28XcA00319
^^^^^^^^^^^^^^^ Your server is an open relay, close it.
I don't understand how you conclude that his server is an open relay from that line, to me that line and the previous one (see below) only says that the bounce message is received from stanford by his domain and not that the original (spam) message was sent by his domain.
Received: from bouncemail.stanford.edu (bouncemail.Stanford.EDU [171.64.14.35]) by lagu.sidhe.net (8.11.6/8.11.6/SuSE Linux 0.5) with SMTP id gA28XcA00319 for
; Sat, 2 Nov 2002 09:33:46 +0100
Furthermore if he was an open relay his domain should have been in the lines below, but I only see that the original mail was received by stanford from that 200.170.149.113 ip-address.
Received: from 1012privat.at (ip-170-149-113.xdsl-fixo.ctbcnetsuper.com.br [200.170.149.113]) by leland3.Stanford.EDU (8.11.6/8.11.6) with SMTP id gA23i3U23625; Fri, 1 Nov 2002 19:44:39 -0800 (PST) From: lobo@0-8-15.ch --
GertJan