After receiving the information below about a spam complaint I am trying to better understand what can be forged in a mail header. Any help is appreciated.
More specificly can this information be forged data Return-Path: <[EMAIL PROTECTED]> (user name changed) I suspect it can. I know this e-mail did not originate form our server or IP's. Just wondering if by coincidence a customer tried to relay spam through another server and left a traceable address though I suspect it is a forgeable one and not a definitive clue. 208.178.127.18 is listed by ORBZ See http://orbz.org/?208.178.127.18 Status: U Return-Path: <[EMAIL PROTECTED]> Received: from pe1.pricengine.com ([208.178.127.18])by merlin (EarthLink SMTP Server) with SMTP id 16J6NN2fR3NZFlq0Thu, 7 Mar 2002 14:55:57 -0800 (PST) Received: from computer2_[216.126.160.21] by pe1.pricengine.com (8.9.3/1.1.29.3/02Aug01-0245PM)id MAA0000095367; Tue, 5 Mar 2002 12:30:26 -0500 (EST) From: <[EMAIL PROTECTED]> Received: from by computer2 with ESMTP; Tue, 05 Mar 2002 12:36:27 -0600 Message-ID: <0000509237c0$00000114$00005312@> To: <Undisclosed [EMAIL PROTECTED]> Subject: Re: collectables Date: Tue, 05 Mar 2002 12:36:21 -0600 MIME-Version: 1.0 Content-Type: text/html;charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal X-Mozilla-Status: 9011 X-Mozilla-Status2: 00000000 X-UIDL: 16J6NN2fR3NZFlq0.2 Thanks Stu ----------------------------------------------------------------------------- CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca 814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker 724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com ----------------------------------------------------------------------------- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
