Noel J. Bergman wrote:
Without the full e-mail, including the routing headers, we can't tell from
where it is coming. Most likely some DHCP pool that has been turned into a
nest of spambots.
I know that, it's just weird that this passed thru since I don't think "[EMAIL PROTECTED]" is subscribed to this mail list.
http://cr.yp.to/immhf/envelope.html
Qmail (and consequently ezmlm-issubn which is invoked by Qmail/ezmlm and driven by environment variables) uses the envelope sender to set the SENDER environment variable - instead of what is written in the From header.
Most probably, the envelope sender of said message was a valid, but forged list subscriber address, i.e. Andrew's email address. The From header could then contain whatever one would like (like [EMAIL PROTECTED]), it is ignored by Qmail anyhow. I can't check to be sure, since my spam filter nuked the message already. :-)
</Steven> -- Steven Noels http://outerthought.org/ Outerthought - Open Source Java & XML An Orixo Member Read my weblog at http://blogs.cocoondev.org/stevenn/ stevenn at outerthought.org stevenn at apache.org
