Hello...
I've been accused of spamming in quite a few emails lately. There is nothing in the headers of the supposed spam emails to connect them to my domain or my ip. I have relay disable except for 2 private (10.0.0.x) IPs. I'm including the text of two of the accusing emails.
The first is from twinkids.com, which has sent me a few such messages.
Am I to take these seriously?
Thx, D.
FIRST ACCUSATION
Date: Fri, 29 Oct 2004 17:21:29 -0800
Subject: EMail Abuse Complaint 10/29/2004 5:21:28 PM
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000020e]. [2-10-5000]
X-Declude-Spoolname: Dde8739da03a63267.SMD
X-Spam-Tests-Failed: SPAMHEADERS
I believe this email either originated from your domain, your domain was involved in it's delivery, or you are the victim of the spammer spoofing your domain information. All of the information is included for you to take action.
Here is the SMTP information.
Domain(s) traced to BOOKMANS.COM ABUSE.EARTHLINK.NET LISTS.CORP.EARTHLINK.NET Abuse address(es) traced to [EMAIL PROTECTED] [EMAIL PROTECTED]
== SMTP Start ==========
Return-Path: <[EMAIL PROTECTED]>
Received: from xx (64.203.29.99) by mta5.wss.scd.yahoo.com (7.0.016)
id 415949D9018D60BE for [EMAIL PROTECTED]; Fri, 29 Oct 2004 16:04:28 -0700
Message-ID: <[EMAIL PROTECTED]> (added by [EMAIL PROTECTED])
Received: from yquhagdjzsv.com (mmds-216-19-12-176.mm.az.commspeed.net [216.19.12.176]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003)) with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Sat, 30 Oct 2004 00:54:12 +0100
Date: Fri, 29 Oct 2004 17:54:12 -0600
From: Andre Worley <[EMAIL PROTECTED]>
X-Accept-Language: en-us, en
To: [EMAIL PROTECTED]
Subject: Re:A new hope
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7Bit
Re:A new hope Hey
You can still benefit from the lowest Mort gage rates in 40 years.\ <snip rest of message>
SECOND ACCUSATION
Date: Fri, 29 Oct 2004 02:46:16 +0800 From: Netvigator Postmaster <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Subject: Spamming IP: 216.19.12.180 X-Declude-Spoolname: D3e7c23b003c40d4f.SMD X-Spam-Tests-Failed: None X-RCPT-TO: <[EMAIL PROTECTED]>
Dear Sir/Madam,
The spammer below is either using your resources to send out bulk unsolicited
commercial e-mail ("spam") or is deceptively trying to make it look like he is. In
either case, a legitimate company like yours probably would not approve. The
information below should be all you need.
Please take the necessary actions to stop the spam.
Thanks for your cooperation !
Regards,
NETVIGATOR Postmaster PCCW Ltd. [EMAIL PROTECTED]
>
>http://termlife.x67fr22v.ph/book.php
>
>----497666692125065627--
>
>------=_NextPart_000_00D5_01C4BCA9.8D325F00
>Content-Type: message/rfc822;
> name="This may help fight flu viruses.eml"
>Content-Transfer-Encoding: 7bit
>Content-Disposition: attachment;
> filename="This may help fight flu viruses.eml"
>
>Return-Path: <[EMAIL PROTECTED]>
>Received: from imsmx05.netvigator.com ([192.168.12.108])
> by imsm026dat.netvigator.com
> (InterMail vM.5.01.06.10 201-253-122-130-110-20040306) with ESMTP
> id <[EMAIL PROTECTED]>;
> Wed, 27 Oct 2004 20:01:58 +0800
>Received: from xx ([207.72.143.146])
> by imsmx05.netvigator.com (8.13.1/8.13.1) with SMTP id i9RC1qlN019001;
> Wed, 27 Oct 2004 20:01:54 +0800
>Received: from bayareaoffices.com (mmds-216-19-12-180.mm.az.commspeed.net [216.19.12.180]) by bayareaoffices.com2 (8.12.11/8.12.11) with ESMTP id 8FDA4EFEDAEE40 for <[EMAIL PROTECTED]>; Wed, 27 Oct 2004 13:54:01 +0100
>Message-ID: <[EMAIL PROTECTED]>
>Date: Wed, 27 Oct 2004 08:58:01 -0400
>From: Josiah Crump <[EMAIL PROTECTED]>
>User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.5) Gecko/20040712
>X-Accept-Language: en-us, en
>To: [EMAIL PROTECTED]
>Subject: This may help fight flu viruses
>MIME-Version: 1.0
>Content-Type: text/html; charset=us-ascii
>Content-Transfer-Encoding: 7Bit
>
><html>
>
><head>
><meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
><title>FLU REMEDY</title>
></head>
>
><body>
>
><p><font size="4">REMEDY TO FLU VACCINE SHORTAGE</font><br>
>The U.S. faces a massive shortage of flu vaccine this winter due to a slip-up at a Chiron lab in England. <br>
>The need for a new production method is suddenly dire.It's the beginning of the flu season, and again the U.S. <br>
>is short of flu vaccine, but this time the shortfall is disastrous. Forbes.com<br>
><br>
><font size="4">Can't They Just Make More? </font><b><font face="Arial Black"> What happened?</font></b>
></p>
>
><p>A major manufacturer of flu vaccine, Chiron, will not be distributing any influenza vaccine for this flu season. <br>
>This means that almost half of the USA's flu vaccine will not be delivered. <br>
><br>
><font size="4"> Answers to Questions About the Flu Vaccine Shortage. </font>
></p>
>
><p>If you had the flu last year, you know how bad it can make you feel. You're hot one minute, cold the next, your head aches, <br>
>and you're completely out of energy. Some people, however, never got the flu because they
>got <b><font size="4" color="#FF0000"> ANTI-DOTE</font></b> <b><font color="#0000FF"> an alternative natural remedy to flu</font></b>.
>And this year, because there's a shortage of traditional flu vaccines, the
>demand for Anti-dote has gone through the roof.
></p>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
