Path: ...!news.misty.com!weretis.net!feeder9.news.weretis.net!news.nk.ca!rocksolid2!i2pn2.org!.POSTED!not-for-mail
From: hquest@hquest.pro.br (HQuest)
Newsgroups: comp.mail.sendmail
Subject: Re: access data base =?UTF-8?B?cXVlc3Rpb24/?=
Date: Sat, 3 Aug 2024 23:33:30 +0000
Organization: novaBBS
Message-ID: <3b21c144d271a325880d79cfa453e0d2@www.novabbs.com>
References: <v8m86f$3l38e$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Info: i2pn2.org;
	logging-data="1372062"; mail-complaints-to="usenet@i2pn2.org";
	posting-account="2XJ8hjIEUuziWBqN+XBS7yv7yfwqQ5GdIjLva+fAx2c";
User-Agent: Rocksolid Light
X-Rslight-Site: $2y$10$vASzCfT5tZZ2KJPOxwYhb.sAtFgdxqFSQsAUHvBKYuONpiFowLXbe
X-Spam-Checker-Version: SpamAssassin 4.0.0
X-Rslight-Posting-User: 3d3517e5dd24387fdf8da64199401ea731577ab2
Bytes: 2008
Lines: 25

On Sat, 3 Aug 2024 21:41:35 +0000, Knute Johnson wrote:

> Return-Path: <info@etsy.com>
> Received: from sourceforge.net ([188.65.247.119])

Since when Etsy it using this false sourceforge.net mail server as their
mx server? Or have you mixed and matched information for privacy to come
up with this aberration?

$ nslookup -q=mx etsy.com
Non-authoritative answer:
etsy.com        mail exchanger = 10 aspmx.l.google.com.
etsy.com        mail exchanger = 50 aspmx3.googlemail.com.
etsy.com        mail exchanger = 30 alt2.aspmx.l.google.com.
etsy.com        mail exchanger = 20 alt1.aspmx.l.google.com.
etsy.com        mail exchanger = 40 aspmx2.googlemail.com.

Authoritative answers can be found from:

$ nslookup 188.65.147.119
119.147.65.188.in-addr.arpa     name = unsetptr.smart-weblications.de.

I would think you should enable a few safety measures - at least a DNSBL
to start - as this seems badly spoofed. A more comprehensive safety list
would include DANE (included with Sendmail), SPF and OpenDKIM (3rd party
tools), to name a few.