if the innocent 3rd parties is the employees, i think that i have some that notification , because the employees receive an mail with subject " PERMANENT DELIVER FAILUARE " when the spamhaus or spamcop block the ip.....something like this :
The attached message had PERMANENT fatal delivery errors!
After one or more unsuccessful delivery attempts the attached message has
been removed from the mail queue on this server. The number and frequency
of delivery attempts are determined by local configuration parameters.
YOUR MESSAGE WAS NOT DELIVERED TO ONE OR MORE RECIPIENTS!
Failed address:
sales@tnz.co.nz
--- Session Transcript ---
Thu 2009-07-09 11:27:53: [1898:1] Parsing Message <xxxxxxxxxxxxxxxxxxxxxxxx\pd35000038671.msg>
Thu 2009-07-09 11:27:53: [1898:1] From:
it@coprint.ro
Thu 2009-07-09 11:27:53: [1898:1] To:
sales@tnz.co.nz
Thu 2009-07-09 11:27:53: [1898:1] Subject: Expired MDaemon license key
Thu 2009-07-09 11:27:53: [1898:1] Message-ID: <WorldClient-F200907091127.AA27520004@coprint.ro>
Thu 2009-07-09 11:27:53: [1898:1] MX-record resolution of [tnz.co.nz] in progress (DNS Server: 192.168.10.254)...
Thu 2009-07-09 11:27:55: [1898:1] * P=010 S=000 D=tnz.co.nz TTL=(1440) MX=[sgw.tnz.co.nz] {60.234.34.119}
Thu 2009-07-09 11:27:55: [1898:1] * P=020 S=001 D=tnz.co.nz TTL=(1440) MX=[mail2.tnz.co.nz] {60.234.157.103}
Thu 2009-07-09 11:27:55: [1898:1] * P=100 S=002 D=tnz.co.nz TTL=(1440) MX=[sgw.tnz.co.nz] {60.234.34.119}
Thu 2009-07-09 11:27:55: [1898:1] Attempting MX: P=010 S=000 D=tnz.co.nz TTL=(1440) MX=[sgw.tnz.co.nz] {60.234.34.119}
Thu 2009-07-09 11:27:55: [1898:1] Attempting SMTP connection to [60.234.34.119 : 25]
Thu 2009-07-09 11:27:55: [1898:1] Waiting for connection...
Thu 2009-07-09 11:27:55: [1898:1] Connection established (85.204.224.156 : 3247 -> 60.234.34.119 : 25)
Thu 2009-07-09 11:27:55: [1898:1] Waiting for protocol initiation...
Thu 2009-07-09 11:27:56: [1898:1] <-- 220 sgw.tnz.co.nz ESMTP SecurityGateway 1.0.4; Thu, 09 Jul 2009 21:35:17 +1200
Thu 2009-07-09 11:27:56: [1898:1] --> EHLO mail2.coprint.ro
Thu 2009-07-09 11:28:28: [1898:1] <-- 250-sgw.tnz.co.nz Hello mail2.coprint.ro (may be forged), pleased to meet you
Thu 2009-07-09 11:28:28: [1898:1] <-- 250-8BITMIME
Thu 2009-07-09 11:28:28: [1898:1] <-- 250-AUTH LOGIN CRAM-MD5
Thu 2009-07-09 11:28:28: [1898:1] <-- 250-STARTTLS
Thu 2009-07-09 11:28:28: [1898:1] <-- 250 SIZE 50000000
Thu 2009-07-09 11:28:28: [1898:1] --> MAIL From:<it@coprint.ro> SIZE=2564
Thu 2009-07-09 11:28:28: [1898:1] <-- 250 <it@coprint.ro>, Sender ok
Thu 2009-07-09 11:28:28: [1898:1] --> RCPT To:<sales@tnz.co.nz>
Thu 2009-07-09 11:28:29: [1898:1] <-- 550 85.204.224.156 listed at spamhaus, see
The Spamhaus Project
--- End Transcript ---
: Message contains [1] file attachments
and my ip is 85.204.224.156