Problema di Abuse?

[archimede]

Ricevo ed inoltro:

> I have just received the attached unsolicited e-mail, apparently
> coming from IP 149.171.166.237 ([No rDns configured]), ...

Your report incorrectly identifies 149.171.166.237 as the source of the
spam.

The message shows your (ISP's) mail server (albacom.net) receiving the
mail from 24.208.12.147 (CPE-24-208-12-147.new.rr.com) (refer to the top
'Received' header line). The second Received line, including an IP
address within our domain, is a fake added by the spammer to confuse
spam reporting tools and analysis.

If we were identified by your "Abuse! antiSPAM software", could you
please follow up with the software vendor and request them to
tune/correct their identification algorithm(s).

Regards,

--
Ben Low
Senior Network Engineer - 02 9385 1139
Enterprise Infrastructure - 02 9385 1111
UNSW Information Technology Services, Kensington NSW 2052, Australia

Alessandro

[zello]

In casi rari, abuse prende per buoni headers falsificati in maniera credibile.
C'è chi mi ha chiesto di fermare l'analisi al primo header di cui non posso essere totalmente sicuro (in pratica: al primo ip esterno alla rete). Penso che lo metterò come opzione ASAP.

Gracias, y hasta luego.