[Mimedefang] Negative addresses??

[WBrown at e1b.org]

mimedefang-bounces at lists.roaringpenguin.com wrote on 12/02/2005 07:30:15 
PM:

>     Can someone explain this to me?  It's from a spam message (in fact, 
> a lot of them are coming through MD+SA these days) and they all show the 

> same thing, negative numbers:

 --------
> Received: from -1216216520 ([222.60.136.228])
>     by serpico.pcraft.com (8.13.0/8.13.0) with SMTP id jB30Mott008917
>     for <ashley.kirchner at highpeaks.org>; Fri, 2 Dec 2005 17:22:54 -0700
> Received: from goprat.com (-1216301840 [-1213314064])
>     by ghfixtures.com (Qmailv1) with ESMTP id 8568A5A816
>     for <ashley.kirchner at highpeaks.org>; Fri, 02 Dec 2005 17:22:58 -0800
 --------
> Received: from 1438002568 ([84.237.176.196])
>     by serpico.pcraft.com (8.13.0/8.13.0) with SMTP id jB308JGl008642
>     for <ashley.kirchner at highpeaks.org>; Fri, 2 Dec 2005 17:08:24 -0700
> Received: from gradykelly.com (1480536112 [1438170304])
>     by gn7.admefres.com (Qmailv1) with ESMTP id 3E3BC79B69
>     for <ashley.kirchner at highpeaks.org>; Fri, 02 Dec 2005 20:14:54 -0500
 --------

I've seen Macintosh computers do this in the past (Mac OS 8.x IIRC) where 
they represent IP addresses as a 32bit signed integer.  Could also be some 
ratware being stupid too.