Isn't that an Earthlink/Sprint owned subsidiary?
Kevin Childers
It's like I've always said, "You can get
more with a kind word and a two by four,
than you can get with just a kind word."
----- Original Message -----
From: "Mike" <[EMAIL PROTECTED]>
To: "Imail Support" <[EMAIL PROTECTED]>
Sent: Friday, June 01, 2001 10:02 AM
Subject: [IMail Forum] Interesting SPAM technique
> I have recieved several of these spams this morning and am curious how it
is
> working.
>
> In my Ooutlook Express client the From column shows as
> [EMAIL PROTECTED]
> mx1 is my IMGate machine (Thanks Len) and the subject shows as "re:your
> account"
>
> How are they scripting the From: and Subject fields to cause OE to display
> the above when the actual header doesn't contain that info?
>
> Does anyone get any real email from "onemain.com" I tempted to just block
> them?
>
> Here is the full message header:
>
> Received: from mx1.netdotcom.com [63.67.194.10] by mail.netdotcom.com
> (SMTPD32-6.05) id ABBFBE0134; Fri, 01 Jun 2001 09:42:23 -0400
> Received: from smtp06.mail.onemain.com (SMTP-OUT003.ONEMAIN.COM
> [63.208.208.73])
> by mx1.netdotcom.com (Postfix) with SMTP id 5323250108
> for <[EMAIL PROTECTED]>; Fri, 1 Jun 2001 09:43:31 -0400 (EDT)
> Received: (qmail 11109 invoked from network); 1 Jun 2001 13:42:10 -0000
> Received: from 216-119-21-246.o1.jps.net (HELO smtp.onemain.com)
> ([216.119.21.246]) (envelope-sender <[EMAIL PROTECTED]>)
> by smtp06.mail.onemain.com (qmail-ldap-1.03) with SMTP
> for <[EMAIL PROTECTED]>; 1 Jun 2001 13:42:10 -0000
> From: =?X-MAC-ARABIC?B?QWRtaW4=?[EMAIL PROTECTED]
> Subject: =?X-MAC-ARABIC?B?cmU6eW91ciBhY2NvdW50?=
> Date: 01 Jun 2001 06:43:13 -0700
> MIME-Version: 1.0
> Content-Type: text/plain
> Content-Transfer-Encoding: 8bit
> Message-Id: <[EMAIL PROTECTED]>
> To: undisclosed-recipients:;
> X-RCPT-TO: <[EMAIL PROTECTED]>
> X-UIDL: 63
> Status: U
>
> Mike
>
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
