***  For details on how to be removed from this list visit the  ***
***          CCP4 home page http://www.ccp4.ac.uk         ***


On Monday 04 December 2006 11:25 am, you wrote:
>
> On Dec 3, 2006, at 12:19 PM, Peter Adrian Meyer wrote:
> > Oddly enough, it looks like this is coming from Buffalo instead of
> > the original sender...Possibly somebody mis-configured their
> > out-of-office reply?
>
> Note that Michael K Swan is not necessarily the affected account, nor
> is it necessarily a virus.

Both points are correct.

Based on the headers you can find in any of these repeat posts,
and appended below, the offending machine appears to be 
claven.dhcp.hwi.buffalo.edu
So if you are going to block on some machine name, that would be
the one.



%%%%%%%%%% headers from mis-behaving mail %%%%%%%%%%%%%%%

Received: from mserv6.dl.ac.uk (mserv6.dl.ac.uk [148.79.80.137])
        by dlmail2.dl.ac.uk (8.12.11.20060308/8.12.11) with ESMTP id 
kB22Oknr005020
        for <ccp4bb>; Sat, 2 Dec 2006 02:24:47 GMT
Received: from mail.hwi.buffalo.edu (claven.hwi.buffalo.edu 
[128.205.165.219])
        by mserv6.dl.ac.uk (8.12.10/8.12.8/[ref [EMAIL PROTECTED]) with 
ESMTP id kB22NGJ0012239
        for <ccp4bb@dl.ac.uk>; Sat, 2 Dec 2006 02:23:40 GMT
Received: from claven.dhcp.hwi.buffalo.edu (unknown [128.205.165.209])
        by mail.hwi.buffalo.edu (Postfix) with ESMTP id 1356D2B3AE7
        for <ccp4bb@dl.ac.uk>; Fri,  1 Dec 2006 10:59:22 -0500 (EST)
Received: from mail pickup service by claven.dhcp.hwi.buffalo.edu with 
Microsoft SMTPSVC;


-- 
Ethan A Merritt
Biomolecular Structure Center
University of Washington, Seattle WA

Reply via email to