It doesn't look like it was relayed off an open relay (the server is
seems to have come from is in Athens, Greece and isn't an open relay).
But the IP address could have been spoofed.
It is a small company with a whole class C address range allocated).
This is why filtering is important.
Stan Lyzak, BSEE, CISSP, MCSE, CCNA, A+
Chief Security Officer
ASysTech, Inc.
-----Original Message-----
From: Imail List [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 15, 2000 9:57 PM
To: IMail_Forum@list. Ipswitch. Com
Subject: [IMail Forum] what and why - this header - spam?
I received a mail on my test box, and the message was blank, and had an
exe
attached [no - I didn't open it! ;-) ]
Is there a way to track who sent it? I'm just curious who any why they
would
send this...
d
Received: from ermis.hol.gr [194.30.192.20] by the.domain.com
(SMTPD32-6.05) id A9A9F015E; Wed, 15 Nov 2000 17:34:33 -0800
Received: (qmail 9148 invoked from network); 16 Nov 2000 01:42:01 -0000
Received: from isis.hol.gr (HELO mail.hol.gr) (194.30.192.21)
by ermis.hol.gr with SMTP; 16 Nov 2000 01:42:01 -0000
Received: (qmail 23053 invoked from network); 16 Nov 2000 01:43:34 -0000
Received: from vdp040.ath04.cas.hol.gr (HELO jjgr) (195.97.119.41)
by isis.hol.gr with SMTP; 16 Nov 2000 01:43:34 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--VE63GDIBGD"
Message-Id: <[EMAIL PROTECTED]>
X-RCPT-TO: <[EMAIL PROTECTED]>
Date: Wed, 15 Nov 2000 17:34:38 -0800
X-UIDL: 274095160
Status: U
From: <>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
