on 5/6/04 10:10 AM, Douglas Cohn wrote: > Why are we looking for the beginning of an IP address?
Our users were receiving a lot of messages like this ... >> Unknown user: [EMAIL PROTECTED] >> >> >> Original message follows. >> >> Received: from 0016190464.com [67.96.70.122] by mx2.acsworld.net >> (SMTPD32-8.05) id AC92E01A0136; Sat, 01 May 2004 17:54:26 -0400 >> Date: Sat, 01 May 2004 16:52:51 -0600 >> To: [EMAIL PROTECTED] which indicates that [EMAIL PROTECTED] sent a message to [EMAIL PROTECTED] However, that really didn't happen. The message contains "Unknown user", has headers but does not have the IP or name of our outgoing mail server in those original headers, so the message wasn't actually sent by an ACSWorld user. If they didn't send the original message, they don't want this message and constantly explaining forging viruses, how they work, why the return message gets returned, etc, was getting tiresome. Later, Greg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
