Annoying little f.......s

Hello all. I've been getting a _LOT_ of spam with the following in the header ... Return-Path: <SRS0=EDeV=VN=4goodhosting.com=sales@php.net> Received: from osu1.php.net (osu1.php.net [140.211.166.39]) by mx.google.com with ESMTP id eq12si5373161icb.88.2011.02.15.19.15.23; Tue, 15 Feb 2011 19:15:24 -0800 (PST) Received-SPF: pass (google.com: domain of SRS0=EDeV=VN=4goodhosting.com=sales@php.net designates 140.211.166.39 as permitted sender) client-ip=140.211.166.39; DomainKey-Status: good Authentication-Results: mx.google.com; spf=pass (google.com: domain of SRS0=EDeV=VN=4goodhosting.com=sales@php.net designates 140.211.166.39 as permitted sender) smtp.mail=SRS0=EDeV=VN=4goodhosting.com=sales@php.net; domainkeys=pass header.From=sales@4goodhosting.com Return-Path: <sales@4goodhosting.com> Authentication-Results: osu1.php.net smtp.mail=sales@4goodhosting.com; spf=pass; sender-id=pass Authentication-Results: osu1.php.net header.from=sales@4goodhosting.com; sender-id=pass; domainkeys=good DomainKey-Status: good Received: from [67.205.102.170] ([67.205.102.170:37984] helo=goodhost.4goodhosting.com) by osu1.php.net (envelope-from <sales@4goodhosting.com>) (ecelerity 2.2.3.46 r(36781)) with ESMTP id 3C/2B-30175-6A34B5D4; Tue, 15 Feb 2011 19:25:32 -0800 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=4goodhosting.com; h=Received:To:Subject:X-Mailer:X-Priority:MIME-Version:Date:Message-ID:From:Reply-To:Content-Type:Content-Transfer-Encoding; b=ObUjjMhRXkVO6/HwyNG8CUiyDPhzlL/Rf2/CmgtI/ApMNQQjHRRnBlTNQzcvhRSHDTGKqymSqiANQB4d/e+ZgrFX9/YEZEJ7Uz3UITL/CJ6K8R/2hm0FZI2CNTEHj1Rc; Received: from goodhost by goodhost.4goodhosting.com with local (Exim 4.69) (envelope-from <sales@4goodhosting.com>) id 1PpXr9-0004IV-Hd for rquadling@php.net; Tue, 15 Feb 2011 19:15:07 -0800 To: rquadling@php.net Subject: [Sales #31693]: 846????????????????? ????????????? X-Mailer: Kayako SupportSuite v3.60.04 X-Priority: 3 MIME-Version: 1.0 Date: Tue, 15 Feb 2011 19:15:07 -0800 Message-ID: <lgox16.1odqu3@localhost> From: "Sales Department" <sales@4goodhosting.com> Reply-To: sales@4goodhosting.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - goodhost.4goodhosting.com X-AntiAbuse: Original Domain - php.net X-AntiAbuse: Originator/Caller UID/GID - [512 514] / [47 12] X-AntiAbuse: Sender Address Domain - 4goodhosting.com Is this really being routed through php.net? If so, is there a problem with osu1.php.net? Open relay? Hack? Panic!!!! Or is it all fake? Regards, Richard. -- Richard Quadling Twitter : EE : Zend @RQuadling : e-e.com/M_248814.html : bit.ly/9O8vFY