Please post evidence of postini false positives here
Quote from: pierre_pierre I am happily married with five rather old Kids
Не действительная невеста, вы изыскиваете?
You might want to mask the last two parts of your IP address in those examples.
My Netgear router logs also go through postini, I have never had a problem, but that is my private postini account I have through my employer.
This mornings log had the following postini headers, comparing them to yours through the PN system may help.
Ignore that.
Have just logged into my postini account and looked at the messages it has held in quarantine and found one from last week it has stopped!
The headers are:
This mornings log had the following postini headers, comparing them to yours through the PN system may help.
Quote Microsoft Mail Internet Headers Version 2.0
Received: from usscex04.work.com ([00.00.00.00]) by ukswex01.work.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 18 Jan 2008 05:00:12 +0000
Received: from mail4.work.com ([00.00.00.00]) by usscex04.plt.work.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 17 Jan 2008 21:00:10 -0800
Received: from psmtp.com (exprod6mx211.postini.com [64.18.1.111])
by mail4.work.com (8.13.8+Sun/8.13.8) with SMTP id m0I5175Y025942
for <godsell4@work.com>; Thu, 17 Jan 2008 21:01:07 -0800 (PST)
Message-Id: <200801180501.m0I5175Y025942@mail4.work.com>
Received: from source ([00.00.00.00]) (using TLSv1) by exprod6mx211.postini.com ([64.18.5.10]) with SMTP;
Thu, 17 Jan 2008 21:00:01 PST
Received: from [84.92.151.145] (helo=unknown)
by pih-relay08.plus.net with smtp (Exim) id 1JFjKj-00038j-05
for godsell4@work.com; Fri, 18 Jan 2008 05:00:01 +0000
Date: Fri,18 Jan 2008 05:00:01 -0000
From: godsell4@work.com
Subject: NETGEAR Security Log [00.00.00]
To: godsell4@work.com
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-pstn-neptune: 4/4/1.00/89
X-pstn-levels: (S: 8.90700/99.90000 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 4 (1.5000:1.5000) s gt3 gt2 gt1 r p m c
X-pstn-addresses: from <godsell4@work.com> [301/14]
X-Scanned-By: MIMEDefang 2.62 on 10.63.1.50
Return-Path: godsell4@work.com
X-OriginalArrivalTime: 18 Jan 2008 05:00:10.0157 (UTC) FILETIME=[00605DD0:01C8598F]
Ignore that.
Have just logged into my postini account and looked at the messages it has held in quarantine and found one from last week it has stopped!The headers are:
Quote Received: from source ([00.00.00.00]) (using TLSv1) by exprod6mx224.postini.com ([64.18.5.10]) with SMTP;
Mon, 14 Jan 2008 21:00:01 PST
Received: from [00.00.00.00] (helo=unknown)
by ptb-relay02.plus.net with smtp (Exim) id 1JEdu4-0002aM-RS
for godsell4@work.com; Tue, 15 Jan 2008 05:00:01 +0000
Date: Tue,15 Jan 2008 05:00:00 -0000
From: godsell4@work.com
Subject: NETGEAR Security Log [00.00.00]
To: godsell4@work.com
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-pstn-neptune: 0/0/0.00/0
X-pstn-levels: (S: 0.82076/99.81754 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 4 (1.5000:1.5000) s gt3 gt2 gt1 r p m c
X-pstn-addresses: from <godsell4@work.com> [301/14]
X-pstn-disposition: quarantine
a new false neg - I sent mail to myself 
also X-pstn-2strike: clear 
Envelope-to: aa@aaaaa.idps.co.uk
Delivery-date: Sat, 19 Jan 2008 00:42:16 +0000
Received: from exprod5mx206.postini.com ([64.18.0.65] helo=psmtp.com)
by pih-sunmxcore16.plus.net with smtp (PlusNet MXCore v2.00) id 1JG1mp-0000L2-Mw
for aa@aaaaaa.idps.co.uk; Sat, 19 Jan 2008 00:42:16 +0000
Received: from source ([79.101.174.147]) by exprod5mx206.postini.com ([64.18.4.14]) with SMTP;
Fri, 18 Jan 2008 18:42:12 CST
X-Originating-IP: [59.318.4.597]
X-Originating-Email: [aaa@aaaaaa.idps.co.uk]
X-Sender: aaaa@aaaaaaa.idps.co.uk
Received: (qmail 45377 by uid 794); Sat, 19 Jan 2008 01:42:20 +0100
Message-Id: <20080119024220.45381.qmail@hytu->
To: <aaaa@aaaaa.idps.co.uk>
Subject: Sat, 19 Jan 2008 01:42:20 +0100 SALE 70% OFF on Pfizer
From: admin@Viagra.com <aaaaa@aaaaaaa.idps.co.uk>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-pstn-2strike: clear
X-pstn-levels: (S: 0.00000/77.28451 R:95.9108 P:95.9108 M:97.0282 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) gt3 gt2 gt1 r p m C
X-pstn-addresses: from <aaa@aaaa.idps.co.uk> forward (user good) [22/1]
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
also X-pstn-2strike: clear Envelope-to: aa@aaaaa.idps.co.uk
Delivery-date: Sat, 19 Jan 2008 00:42:16 +0000
Received: from exprod5mx206.postini.com ([64.18.0.65] helo=psmtp.com)
by pih-sunmxcore16.plus.net with smtp (PlusNet MXCore v2.00) id 1JG1mp-0000L2-Mw
for aa@aaaaaa.idps.co.uk; Sat, 19 Jan 2008 00:42:16 +0000
Received: from source ([79.101.174.147]) by exprod5mx206.postini.com ([64.18.4.14]) with SMTP;
Fri, 18 Jan 2008 18:42:12 CST
X-Originating-IP: [59.318.4.597]
X-Originating-Email: [aaa@aaaaaa.idps.co.uk]
X-Sender: aaaa@aaaaaaa.idps.co.uk
Received: (qmail 45377 by uid 794); Sat, 19 Jan 2008 01:42:20 +0100
Message-Id: <20080119024220.45381.qmail@hytu->
To: <aaaa@aaaaa.idps.co.uk>
Subject: Sat, 19 Jan 2008 01:42:20 +0100 SALE 70% OFF on Pfizer
From: admin@Viagra.com <aaaaa@aaaaaaa.idps.co.uk>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-pstn-2strike: clear
X-pstn-levels: (S: 0.00000/77.28451 R:95.9108 P:95.9108 M:97.0282 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) gt3 gt2 gt1 r p m C
X-pstn-addresses: from <aaa@aaaa.idps.co.uk> forward (user good) [22/1]
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
