diff --git a/2006-03-03-mail-relaying-with-netsuite.html b/2006-03-03-mail-relaying-with-netsuite.html
new file mode 100644
index 0000000..15746f1
--- /dev/null
+++ b/2006-03-03-mail-relaying-with-netsuite.html
@@ -0,0 +1,26 @@
+
+
+
+
+
+
When sending a reply to a valid “message.@messages.netsuite.com” address, I discovered something interesting. NetSuite uses these addresses to store a copy of the message with the order, then forwards the message along to the real destination. However, the forwarding method is busted.
+
+It translates the headers in the original message. I sent:
+
+From: Ian Gulliver <ian@penguinhosting.net>
+To: “George Sasson (PAA)” <messages.<msgid>@messages.netsuite.com>
+Cc: ian-djmart@penguinhosting.net
+
+
+It internally translated this to:
+
+From: ian@penguinhosting.net
+To: george@proaudioamerica.com
+Cc: ian-djmart@penguinhosting.net
+
+
+It then passed the message to its outgoing mail program, which reparsed the headers. In this case, it means that I got two copies of the message; one from my local MTA because of the CC, and one back from NetSuite because of the CC.
+
+prox helped me test this; it works when the CC isn’t coming back to the same host. That means it’s a valid relay method.
+
+
diff --git a/index.html b/index.html
index 4006dc6..0b9705c 100644
--- a/index.html
+++ b/index.html
@@ -40,6 +40,7 @@
2009-Sep-11: Confusing BIND with CNAMEs
2009-Feb-19: The odd case of my mugging
2009-Feb-03: 5-packet TCP connection?
+2006-Mar-03: Mail relaying with NetSuite
2006-Mar-02: udev is your friend
2006-Mar-02: Why is my directory empty and large?
2006-Feb-26: Why isn’t mod_auth_pam working with NIS?
diff --git a/markdown/2006-03-03-mail-relaying-with-netsuite.md b/markdown/2006-03-03-mail-relaying-with-netsuite.md
new file mode 100644
index 0000000..dc0a877
--- /dev/null
+++ b/markdown/2006-03-03-mail-relaying-with-netsuite.md
@@ -0,0 +1,24 @@
+
+
+
+
+
+When sending a reply to a valid “message.@messages.netsuite.com” address, I discovered something interesting. [NetSuite](http://netsuite.com/) uses these addresses to store a copy of the message with the order, then forwards the message along to the real destination. However, the forwarding method is busted.
+
+It translates the headers in the original message. I sent:
+
+ From: Ian Gulliver
+ To: “George Sasson (PAA)” @messages.netsuite.com>
+ Cc: ian-djmart@penguinhosting.net
+
+It internally translated this to:
+
+ From: ian@penguinhosting.net
+ To: george@proaudioamerica.com
+ Cc: ian-djmart@penguinhosting.net
+
+It then passed the message to its outgoing mail program, which __reparsed the headers__. In this case, it means that I got two copies of the message; one from my local MTA because of the CC, and one back from NetSuite because of the CC.
+
+[prox](http://prolixium.com/) helped me test this; it works when the CC isn’t coming back to the same host. That means it’s a valid relay method.
+
+
diff --git a/markdown/index.md b/markdown/index.md
index eca355e..97d91b9 100644
--- a/markdown/index.md
+++ b/markdown/index.md
@@ -39,6 +39,7 @@
1. 2009-Sep-11: [Confusing BIND with CNAMEs](2009-09-11-confusing-bind-with-cnames.html)
1. 2009-Feb-19: [The odd case of my mugging](2019-02-19-the-odd-case-of-my-mugging.html)
1. 2009-Feb-03: [5-packet TCP connection?](2009-02-03-5-packet-tcp-connection.html)
+1. 2006-Mar-03: [Mail relaying with NetSuite](2006-03-03-mail-relaying-with-netsuite.html)
1. 2006-Mar-02: [udev is your friend](2006-03-02-udev-is-your-friend.html)
1. 2006-Mar-02: [Why is my directory empty and large?](2006-03-02-why-is-my-directory-empty-and-large.html)
1. 2006-Feb-26: [Why isn’t mod\_auth\_pam working with NIS?](2006-02-26-why-isnt-mod_auth_pam-working-with-nis.html)