procmail
[Top] [All Lists]

spammer header

1999-05-25 00:14:14
I saved and email to file, and their is more of the envelope
than you see by just reading the message (I use elm/unix).

From: left(_at_)right(_dot_)com
Received: from GARY.closeoutbuyers.com (port116039.terraworld.net
[206.53.116.39
]) by hhem.visi.com (8.8.8/8.7.5) with SMTP id MAA17938 for
<blackh(_at_)visi(_dot_)com>; M
on, 24 May 1999 12:17:49 -0600 (MDT)
Posted-Date: Mon, 24 May 1999 12:17:49 -0600 (MDT)
To: <blackh(_at_)visi(_dot_)com>
Date: Mon, 24 May 1999 09:44:08
Message-Id: 
<454(_dot_)358049(_dot_)311794(_at_)GARY(_dot_)closeoutbuyers(_dot_)com>
Subject: SALE!!!   Soccerballs - Basketballs - Beach Volleyballs &
Soccerballs
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Status: RO
===============================

Suppose I want to write an autoresponder for spam.  I rely to the
message and put some keyword in the reply subject that procmail
looks for.  It goes to the admin of his ISP and complains about
unsolicited email and asks for this user to be warned or dropped.

0) did he give a fake FROM with "From: left(_at_)right(_dot_)com" ?

1) is GARY.closeoutbuyers.com his real email name
   as in EmailName <email(_at_)email(_dot_)com> ?

2) is his email domain port116039.terraworld.net ?
   where's the something@ that goes before?
  is it 454(_dot_)358049(_dot_)311794(_at_)GARY(_dot_)closeoutbuyers(_dot_)com ?

3) could I send email to the admin/owner of IP address
 206.53.116.39  (is the alias  port116039.terraworld.net) ?

I would send any bounced mail to /dev/null.  Would this treatment
get my own ISP in trouble?

regards   TOm   tomcat(_at_)visi(_dot_)com

<Prev in Thread] Current Thread [Next in Thread>
  • spammer header, uNcONvEntiOnaL <=