Hello, should be able to block it be adding the ip's to your access control list for the SMTP service in Imail.
ken Friday, November 21, 2003, 11:08:17 AM, you wrote: BS> Here are the headers from a spam message I received...and by the way it BS> looks like it came from ME! I went to DNSstuff.com and looked up the IP BS> which was 199.8.47.99 or 99.47.8.199. It seems to be coming from BS> Manchester College...probably a little group of spammers I'm guessing. BS> Now that I am armed with the knowledge of the spammer and their IP, what BS> is the best way to block it? I also included the detail from BS> dnsstuff.com below the spam headers. BS> Thanks, BS> Samantha BS> Microsoft Mail Internet Headers Version 2.0 BS> Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org BS> with Microsoft SMTPSVC(5.0.2195.6713); BS> Fri, 21 Nov 2003 10:47:32 -0500 BS> Received: from SMTP32-FWD by apollo.misd.net BS> (SMTP32) id A00FE41E2; Fri, 21 Nov 2003 10:43:14 -0500 BS> Received: from misd.net [199.8.47.99] by apollo.misd.net with ESMTP BS> (SMTPD32-8.03) id A2871ACD032E; Fri, 21 Nov 2003 10:43:03 -0500 BS> Received: from CPQ19372110041 [10.30.10.12] by misd.net with eSMTP; BS> Fri, 21 Nov 2003 10:43:19 -0500 BS> Message-ID: <[EMAIL PROTECTED]> BS> From: "kevin" <[EMAIL PROTECTED]> BS> To: <[EMAIL PROTECTED]> BS> Subject: Isn.t it time you refinanc.ed your mor.tgage BS> Date: Fri, 21 Nov 2003 10:43:19 -0500 BS> MIME-Version: 1.0 BS> Content-Type: text/html; charset="ISO-8859-1" BS> X-Priority: 3 BS> X-Mailer: PHP BS> Return-Path: [EMAIL PROTECTED] BS> Hel-Tracking: <c2JyaWRnZXNAbWlzZC5uZXQ=> BS> X-Declude-Sender: [EMAIL PROTECTED] [199.8.47.99] BS> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) BS> for spam. BS> X-Spam-Tests-Failed: Whitelisted [0] BS> X-OriginalArrivalTime: 21 Nov 2003 15:47:32.0088 (UTC) BS> FILETIME=[C67E6F80:01C3B046] BS> Generated by www.DNSstuff.com BS> Country: UNITED STATES BS> NOTE: More information appears to be available at NET-199-8-40-0-1. BS> Using cached answer (or, you can get fresh results). BS> Indiana Higher Education Telecommunication System NETBLK-INDNET BS> (NET-199-8-0-0-1) BS> 199.8.0.0 - 199.8.255.255 BS> Manchester College INDNET-MANCH (NET-199-8-40-0-1) BS> 199.8.40.0 - 199.8.47.255 BS> # ARIN WHOIS database, last updated 2003-11-20 19:15 BS> # Enter ? for additional hints on searching ARIN's WHOIS database. BS> Samantha Bridges BS> Communications Technician BS> Macomb Intermediate School District BS> 44001 Garfield Road BS> Clinton Township MI 48038-1100 BS> (586) 228-3300 BS> [EMAIL PROTECTED] BS> http://www.misd.net BS> CONFIDENTIALITY NOTICE: This email message, including any attachments, BS> is for the sole use of the intended recipient(s) and may contain BS> confidential and privileged information. Any unauthorized review, use, BS> disclosure or distribution is prohibited. If you are not the intended BS> recipient, please contact the sender by reply email and destroy all BS> copies of the original message. BS> --- BS> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] BS> --- BS> This E-mail came from the Declude.JunkMail mailing list. To BS> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and BS> type "unsubscribe Declude.JunkMail". The archives can be found BS> at http://www.mail-archive.com. BS> --- BS> [This E-mail scanned for viruses by Declude Virus] -- Best regards, Administration mailto:[EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
