RE: New kind of messages, blew right through my Trashfinder !

[Randy Brukardt]

Essentially, you have Trash Finder set up to pass these messages. (Note the "X-Trashfinder: Message Passed..." line in the header. If a spammer figures that out, they'll take advantage of it.   This is the reason that I don't recommend using the "Pass" filter in Trash Finder: "From" addresses are easy to fake. I've seen mail "from" our servers, too.   I use the "No Delete" filter to insure that outgoing mail doesn't get deleted, but it might be filtered and delayed if there is something weird in it. That's life.                       Randy. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of John Martoccio Sent: Thursday, January 15, 2004 5:57 AM To: imsusers@rockliffe.com Subject: New kind of messages, blew right through my Trashfinder ! Good Morning,       Last night, I received a disturbing response from one of my clients, that a message that appeared to be sending from them, to them, had appeared in their inbox !   Here is the header from that message: Received: from computer (adsl-68-77-83-169.dsl.ipltin.ameritech.net [68.77.83.169]) by ntserver.fastad.com  (SMTPRCV 0.48) with SMTP id <[EMAIL PROTECTED]>;  Wed, 14 Jan 2004 06:10:55 -0600 Message-ID: <[EMAIL PROTECTED]> From: "" <[EMAIL PROTECTED]> Reply-To: "" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] CC: ,[EMAIL PROTECTED],[EMAIL PROTECTED] Subject: RE:Beware of cheap ripoffs Content-Type: text/html;charset="iso-8859-1" Date: Wed, 14 Jan 2004 06:08:01 -0600 X-Mailer: (9.0.2910.0) X-Trash-Finder: Message passed, "@fastad.com" found in Return-path in RCP   According to my wife that works for a large enterprise, she has been in contact with Microsoft on this issue with their exchange server putting these right through, and she has supposedly has seen hundreds of these.  This was the first one that I had seen where it blew right past everything, so I want to put it out there for examination.   Sincerely, John Martoccio Intelligent Solutions (a computer VAR) Fox Lake, IL, USA [EMAIL PROTECTED]