[courier-users] How did this pass SPF?

Hey all,

I received a piece of spam tonight, to myself from myself (supposedly).
I don't understand the SPF check: for the MAILFROM test, it indicates
sender=info@zyberphar.com (result "none"). However, the From: is
clearly info@zygoat.ca, which would have failed since I have SPF records
for zygoat.ca.

Where did the zyberphar.com domain come from? I thought the MAILFROM
SPF check matched against the From: field.

Full headers follow.

thanks,

-ben


X-Spam-Checker-Version: SpamAssassin 3.2.1-gr1-zygoat_pesto (2007-05-02) on
pesto.zygoat.ca
X-Spam-Level:
X-Spam-Status: No, score=-94.2 required=6.0 tests=HTML_IMAGE_RATIO_06,
HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100 ,RAZOR2_CF_RANGE_E4_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RDNS_NONE,U SER_IN_WHITELIST
autolearn=disabled version=3.2.1-gr1-zygoat_pesto
Received: from localhost (localhost [127.0.0.1])
(forwarded by info@zygoat.ca)
by pesto.zygoat.ca with local; Mon, 28 Apr 2008 23:19:10 -0400
id 0032069E.481693AE.0000312A
Delivered-To: info@zygoat.ca
Received: from gecdsb.on.ca ([::ffff:199.71.141.254])
by pesto.zygoat.ca with esmtp; Mon, 28 Apr 2008 23:19:04 -0400
id 003204A2.481693A9.00003120
Received-SPF: none (Address does not pass the Sender Policy Framework)
SPF=HELO;
sender=gecdsb.on.ca;
remoteip=::ffff:199.71.141.254;
remotehost=;
helo=gecdsb.on.ca;
receiver=pesto.zygoat.ca;
Received-SPF: none (Address does not pass the Sender Policy Framework)
SPF=MAILFROM;
sender=info@zyberphar.com;
remoteip=::ffff:199.71.141.254;
remotehost=;
helo=gecdsb.on.ca;
receiver=pesto.zygoat.ca;
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Old-Return-Path: communications_msn_cs_enus@cimail15.msn.com
Received: (qmail 47823 by uid 521); Mon, 28 Apr 2008 11:19:06 -0500
Message-Id: <20080428061906.47825.qmail@gecdsb.on.ca>
To: info@zygoat.ca
Subject: Get Your Free Shipping on Your $200 Shop
From: info@zygoat.ca
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Date: Mon, 28 Apr 2008 23:19:10 -0400


--
Ben Kennedy (chief magician)
zygoat creative technical services
http://www.zygoat.ca



-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757...un.com/javaone
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users