Charles MacDonald <cmacd@achilles.net> writes:
> I received an e-mail that indicates that someone may be using my FAQ
> posting address to originate a spam...
> THe headers returned were as follows:
> Return-Path: <cmacd@achilles.net>
> X-Rocket-Spam: 209.30.76.240
> X-Track: 132: 2
> Received: from p240.amax15.dialup.lax1.flash.net (HELO access.k12.wv.us)
> (209.30.76.240)
> by mta113.mail.yahoo.com with SMTP; 6 Jan 2000 18:05:44 -0000
> From: <cmacd@achilles.net>
> Subject: Greetings
> Date: Thu, 6 Jan 2000 09:52:58
> Message-Id: <248.75239.627798@achilles.net>
> Mime-Version: 1.0
> Content-Type: text/plain; charset="us-ascii"
Relax, you're not being singled out. There are quite a few spam engines
that send out *all* their junk with the return address forged as the
current recipient. I suppose the spammers think that makes it more
difficult to send back a complaint ... me, I figure it just makes it
easier to recognize those spams with procmail ;-)
No one who's spent any time fighting spam puts even the slightest
credence in either the From: or Return-Path: of a spam, as they are
invariably fraudulent. So even if someone were trying to sully your
reputation this way, it wouldn't work.
regards, tom lane
This archive was generated by hypermail 2b29 : Sat Aug 05 2000 - 12:25:31 CDT