> Feel free to post the headers -- I think the analysis of E-mail headers can
> benefit a lot of people on this list.

here are the headers of the spam-they flagged me on one of the received from 
that had IP address of  63.173.78.187 - a block that sprint assigned me, but 
I haven't put to use yet. (they looked up the ip at arin.net)
I cut the actual message out as it was an html form 

--the folks [EMAIL PROTECTED] (spam e) notified of the abuse----
Subject: your info
Date: Wed, 2 Jan 2002 12:00:18 -0500
From: Technology Resources <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], 
[EMAIL PROTECTED], [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED] (e-mail referenced)

--------------------spam headers---------------------------------

>Return-Path: <[EMAIL PROTECTED]>
>Delivered-To: l
>Received: (qmail 16885 invoked from network); 28 Dec 2001 21:43:09 -0000
>Received: from adsl-nrp10-sao-c8b0fab9.brdterra.com.br (HELO lycos.com)
> ([EMAIL PROTECTED]) by  with SMTP; 28 Dec 2001 21:43:09 -0000
>Received: from unknown (HELO rly-xb01.mx.aol.com) (62.133.159.140)
>       by smtp-server1.cfl.rr.com with NNFMP; Sat, 29 Dec 2001 00:28:22 -0000
>Received: from [99.85.114.89] by f64.law4.hotmail.com with asmtp; 29 Dec
> 2001 04:24:11 -0400 Received: from unknown (179.108.71.159)
>       by pet.vosn.net with QMQP; Fri, 28 Dec 2001 14:20:00 +1000
>Received: from mailout2-eri1.midsouth.rr.com ([63.173.78.187])
>       by f64.law4.hotmail.com with asmtp; Fri, 28 Dec 2001 20:15:49 +0400
>Received: from [43.132.91.89] by asy100.as122.sol.superonline.com with
> esmtp; Sat, 29 Dec 2001 05:11:39 -0500 Reply-To: <[EMAIL PROTECTED]>
>Message-ID: <008d82b13aea$3464d0a8$7ad15ee4@bqmvau>

From: <[EMAIL PROTECTED]>

>To:
>Subject: your info
>MiME-Version: 1.0
>X-Priority: 3 (Normal)
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 5.50.4133.2400
>Importance: Normal
>Content-Type: multipart/mixed;
>       boundary="----=_NextPart_000_00E8_88A51E2E.A0560D00"
>X-UIDL: 8&X!!LG<!!3Je!!4F/"!

-- 
Thanks,
Kevin

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to