>I've picked up a couple of these over the last three days or so. All from
>the same guys.
It's very, very common for spammers to use forged return addresses that
happen to be valid addresses (typically get the return address by picking
random addresses from their recipient list). There's nothing that can be
done about it, except to try to track down the spammer (whereever in the
world they may be) and stop them.
>Note the last line (X-Authentication-Warning).
>
>What is this and what can I do about it, if anything?
>
>Received: from web.tradeye.com [211.234.93.182] by msb1.mymailserver.net
>with ESMTP
> (SMTPD32-6.06) id ACFF2950144; Wed, 22 May 2002 03:03:43 -0700
>Received: (from nobody@localhost)
>by web.tradeye.com (8.9.3/8.9.3) id TAA19754;
>Message-Id: <[EMAIL PROTECTED]>
>X-Authentication-Warning: web.tradeye.com: nobody set sender to
>[EMAIL PROTECTED] using -f
That's a "made-up" warning that has little meaning except to those who use
the software that creates it. It appears quite a bit, and is likely a from
a Unix program. The tradeye.com mailserver apparently received the E-mail
from a local user, so the spammer may have had a program running on the server.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
