On Wednesday 12 October 2011 11:34, Thomas Backlund wrote: > it's easy to spoof and send > with another users address as sender id.
And it looks like that's what happened here, from what I can determine. The two posts from Duane, that I found, was sendt from "***.dsl.mindspring.com" while the spam was sendt from "88.253.250.161" (.ttnet.net.tr - Turkey) via the same SMTP server, using Earthlinks webmail. (According to headers.) So it appears that Duane doesn't have a compromised system after all, as Florian suggested. Oh well. Like they say, shit happens to good people too. :-)= -- Johnny A. Solbu PGP key ID: 0xFA687324
signature.asc
Description: This is a digitally signed message part.
