Spam Filter ISP Forums : Weird Email Caught by SpamFilter https://www.logsat.com/spamfilter/forums/ Sat, 16 May 2026 00:37:13 +0000 Sun, 14 Sep 2003 22:36:00 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=1949 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Weird Email Caught by SpamFilter : What you are seing are simply...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1981&title=weird-email-caught-by-spamfilter#1981 Author: LogSat
Subject: 1949
Posted: 14 September 2003 at 10:36pm

What you are seing are simply email headrs, they do not mean anything. What counts is the RCPT TO command (which you'll see in the SpamFilter activity log), which indicates the actual email address the email is going to be delivered to. If' the RCPT TO is in your local domains, it will be delivered. The senders can put whatever email address they want in the "To:" email header, it does absolutely not have to match with the RCPT TO command.

Before you ask "how is this possible", think that if someone BCCs you on an email, the "To:
header will be the the original email address of the recipient, while the RCPT TO command will contain your email address, which is completely different from the TO. As you see this is a perfectly valid scenario where the two are different.

Roberto F.
LogSat Software

]]> Sun, 14 Sep 2003 22:36:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1981&title=weird-email-caught-by-spamfilter#1981 <![CDATA[Weird Email Caught by SpamFilter : Does this mean somebody is probing...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1966&title=weird-email-caught-by-spamfilter#1966 Author: chinabee
Subject: 1949
Posted: 12 September 2003 at 6:00pm

Does this mean somebody is probing my server? There's nothing I need to worry?]]> Fri, 12 Sep 2003 18:00:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1966&title=weird-email-caught-by-spamfilter#1966 <![CDATA[Weird Email Caught by SpamFilter : Google&#039;s your friend :)ht...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1963&title=weird-email-caught-by-spamfilter#1963 Author: Guests
Subject: 1949
Posted: 12 September 2003 at 12:32pm

Google's your friend :)

http://www.google.com/search?q=t_Smtp.LocalIP&btnG=Google+Search&hl=en&lr=&ie=UTF-8&oe=utf-8]]> Fri, 12 Sep 2003 12:32:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1963&title=weird-email-caught-by-spamfilter#1963 <![CDATA[Weird Email Caught by SpamFilter : What I don&#039;t understand is...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1949&title=weird-email-caught-by-spamfilter#1949 Author: chinabee
Subject: 1949
Posted: 11 September 2003 at 10:10am

What I don't understand is why this email shows up in my quarantine list? SpamFilter shouldn't even receive this as this is not an allowed relay. The reason given was 'reversed DNS not found'

66.46.21.191 is my firewall.

 

Received: from 61.73.48.153 by 192.168.1.201 (LogSat Software SMTP Server) Wed, 10 Sep 2003 15:49:33 -0400
From: china9988@21cn.com
Subject: 66.46.21.191
To: china9988@21cn.com
Date: Fri, 25 Jul 2003 06:32:52 +0900
X-Priority: 3
X-Library: Indy 8.0.25
X-Server: LogSat Software SMTP Server

t_Smtp.LocalIP

]]> Thu, 11 Sep 2003 10:10:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1949&PID=1949&title=weird-email-caught-by-spamfilter#1949