I have recieved several of these spams this morning and am curious how it is
working.
In my Ooutlook Express client the From column shows as
[EMAIL PROTECTED]
mx1 is my IMGate machine (Thanks Len) and the subject shows as "re:your
account"
How are they scripting the From: and Subject fields to cause OE to display
the above when the actual header doesn't contain that info?
Does anyone get any real email from "onemain.com" I tempted to just block
them?
Here is the full message header:
Received: from mx1.netdotcom.com [63.67.194.10] by mail.netdotcom.com
(SMTPD32-6.05) id ABBFBE0134; Fri, 01 Jun 2001 09:42:23 -0400
Received: from smtp06.mail.onemain.com (SMTP-OUT003.ONEMAIN.COM
[63.208.208.73])
by mx1.netdotcom.com (Postfix) with SMTP id 5323250108
for <[EMAIL PROTECTED]>; Fri, 1 Jun 2001 09:43:31 -0400 (EDT)
Received: (qmail 11109 invoked from network); 1 Jun 2001 13:42:10 -0000
Received: from 216-119-21-246.o1.jps.net (HELO smtp.onemain.com)
([216.119.21.246]) (envelope-sender <[EMAIL PROTECTED]>)
by smtp06.mail.onemain.com (qmail-ldap-1.03) with SMTP
for <[EMAIL PROTECTED]>; 1 Jun 2001 13:42:10 -0000
From: =?X-MAC-ARABIC?B?QWRtaW4=?[EMAIL PROTECTED]
Subject: =?X-MAC-ARABIC?B?cmU6eW91ciBhY2NvdW50?=
Date: 01 Jun 2001 06:43:13 -0700
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[EMAIL PROTECTED]>
To: undisclosed-recipients:;
X-RCPT-TO: <[EMAIL PROTECTED]>
X-UIDL: 63
Status: U
Mike
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
