Re: 216.37.20.20
Alexey Lobanov <[email protected]> Fri, 29 Dec 2006 04:53:19 +0300
| Newsgroups | gmane.mail.spam.dsbl.admin |
|---|---|
| Message-ID | <[email protected]> |
An idea. Note that it was AUTH LOGIN, not AUTH NTLM. It means that this "info" may be in some local database specific for the mail software in "mailfilter" machine, instead of SAM. Alexey > Connecting to 216.37.20.20... done. > <<< 220 ********************** >>>> EHLO lobanov.sp.ru > <<< 250-mailfilter2003.TIG.local > <<< 250-AUTH GSSAPI NTLM LOGIN > <<< 250 XA >>>> AUTH LOGIN > <<< 334 VXNlcm5hbWU6 >>>> aW5mbw== > <<< 334 UGFzc3dvcmQ6 >>>> aW5mbw== > <<< 235 2.7.0 Authentication successful. >>>> MAIL FROM:<[email protected]> > <<< 250 2.1.0 [email protected] OK >>>> RCPT TO:<[email protected]> > <<< 250 2.1.5 [email protected] >>>> DATA > <<< 354 Start mail input; end with <CRLF>.<CRLF> >>>> (message) > <<< 250 2.6.0 <[email protected]> Queued > mail for delivery >>>> QUIT > <<< 221 2.0.0 tobiasemail.TIG.local Service closing transmission channel > > ------------------------------------------------------- > Server accepted message > AUTH=login USER=info PASS=<censored> IP=216.37.20.20 > -------------------------------------------------------