procmail
[Top] [All Lists]

Re: help needed with spam headers

1997-06-07 19:25:00
On Sat, 7 Jun 1997, Lance Cummings wrote:

I'd like to write a nice, reasonable complaint about some spam I received
today, but the headers confuse me to no end.

Can anyone decipher this and tell me who I should likely address my
complaint to?

--
Received: (from majordomo(_at_)localhost) by turtle.mrj.com (8.6.10/8.6.10) 
id 
DAA10960 for tkdesk-outgoing; Sat, 7 Jun 1997 03:18:08 -0400

Received: from trueworld.com (www.trueworld.com [204.182.160.161]) by 
                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
This was the SPAM injection point.

Sat, 7 Jun 1997 03:17:53 -0400
Received: from 1-800-9powder.com (1Cust17.Max6.Orlando.FL.MS.UU.NET 
[153.34.154.17])                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 

The SPAM originated from a UU.NET dialup and the SPAMMER was trying to 
cover this up with forgery.

I received a copy of the same SPAM with a different injection point.

--below this line is all forged garbage--
by trueworld.com (8.6.12/InteleNet) with SMTP id AAA05338; 
Sat, 7 Jun 1997 00:12:45 -0700
Received: from mailhost.postal.com (alt1.postal.com (201.145.7.62)) by 
postal.com (8.8.5/8.6.5) with SMTP id GAA08032 for 
<VIP(_at_)morehits(_dot_)com>; Sat, 07 
Jun 1997 02:59:10 -0600 (EST)
                    ^^^^^^^^^^^
Trademark of the Stealth mailer. Makes a good fingerprint for procmail 
filtering.

Regards,

Dave/Webmaster

           Join www.cauce.org | Join Joke-L
  Hit SPAMMERS Where It Hurts | Listserv <listserv(_at_)ddave(_dot_)com>

"God grant me the serenity to accept the things I cannot change, 
the courage to change the things I can, and the wisdom to hide 
the bodies of the SPAMMERS that I killed."

<Prev in Thread] Current Thread [Next in Thread>