Vasiliy G Tolstov wrote:
> Hello. Sometime i got strange spam e-mails like:
>
> Return-path: <gagesf0@???>
> Envelope-to: v.tolstov@???
> Delivery-date: Wed, 19 Aug 2009 11:59:31 +0400
> X-SPF: none (irish-hostmasters.com)
> X-DKIM: unsigned (irish-hostmasters.com)
> Received: from [UNAVAILABLE] ([61.74.98.247]:49525 helo=WRNYQDXF) by
> mxs.selfmail.ru with esmtp (Exim 4.69) (envelope-from
> <gagesf0@???>) id 1Mdg4l-0003fP-KX for
> v.tolstov@???; Wed, 19 Aug 2009 11:59:30 +0400
> Received: from 61.74.98.247 by irish-hostmasters.com; Wed, 19 Aug 2009
> 16:58:40 +0900
> Message-ID: <000d01ca20a2$dda5c5a0$6400a8c0@gagesf0>
> From: Domenick Reid <bashreg@???>
> To: <bashreg@???>
> Subject: =?koi8-r?B?78TOwSDOz97YIMkgz87BINTXz9EgzsHX08XHxME=?=
> Date: Wed, 19 Aug 2009 16:58:40 +0900
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0007_01CA20A2.DDA5C5A0"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2800.1106
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
> X-Evolution-Source: imap://vase%40selfip.ru@imap.selfmail.ru/
>
>
>
> Exim has spf check, but in this situation - From: bashreg@???
> (selfip.ru is my domain with -all spf record), but in spf check testing
> irish-hostmasters.com ? Why?
>
Because the envelope-from is gagesf0@??? (line seen in
your Received header)
--
010100100110010101101110011000010111010101100100
010000010110110001101100011000010111001001100100
