procmail
[Top] [All Lists]

MAILER_DAEMON Golf Ball Spam

1998-02-06 03:59:44
I have seen several complaints about this spam.  I do not understand how it
got past my procmail 3.10 recipe unless procmail is treating MAILER_DAEMON
in some special way.  BTW, t-1net.com ceased to exist on January 5, 1998.
It will not exist ever again.  The t-1net was forged by the "Ballman", Dana
Jones in Texas, a former customer of t-1net.

Here is my filter for t-1net.com:

:0
* ^Received:.*t-1net\.com
/dev/null

And here are the headers for the spam.  What did I do wrong?  This is a
potential major problem if the spammers can use MAILER_DAEMON to get
through the procmail filters.  BTW:  I can't resolve 209.136.153.210, nor
can I traceroute it.  It may be forged, or the spammer domain may have been
terminated.

Felix   ftilley(_at_)goodnet(_dot_)com

================================================


Received: from mail.t-1net.com (root(_at_)[209(_dot_)136(_dot_)153(_dot_)210])
        by mail.goodnet.com (8.8.8/8.8.6) with ESMTP id NAA15323;
        Sun, 25 Jan 1998 13:51:25 -0700 (MST)
Date: Sat, 24 Jan 1998 15:51:31 -0600
Message-Id: <199801242151(_dot_)PAA08870(_at_)mail(_dot_)t-1net(_dot_)com>
From: MAILER-DAEMON(_at_)mail(_dot_)goodnet(_dot_)com
Subject: About Golf Balls
X-UIDL: dfe51df0422250ae2da1de91e2bd650a


=====> WE WANT YOU TO KNOW MORE ABOUT GOLF BALLS <=======

Lets Take Air For Example...

[crap deleted]


<Prev in Thread] Current Thread [Next in Thread>