More likely a faked 'From' address. While possible, it's highly improbable that the source is actually Ralf's machine. I've routed my copies to /dev/null so I can't examine the headers to determine if the source address actually resides in Europe or not.
Here you have a few of them. Nothing goes to /dev/null here without me looking at it first :)
Those were send to this list:
Received: from cruzeiro (cruzeiro.fisc.wwu.edu [140.160.220.200]) by master.modssl.org (Postfix) with SMTP id 8EBC7A8934
Received: from CLS-TORG1010-24 (torg1010-24.its.vt.edu [128.173.44.188]) by master.modssl.org (Postfix) with SMTP id 245B5A8934
Received: from AdamBroughton (asdl00.ae.gatech.edu [130.207.39.100]) by master.modssl.org (Postfix) with SMTP id 96173A8934
Received: from woofie (A052105.N1.Vanderbilt.Edu [129.59.52.105]) by master.modssl.org (Postfix) with SMTP id 37622A8934
Received: from CLS-TORG1010-30 (torg1010-30.its.vt.edu [128.173.44.194]) by master.modssl.org (Postfix) with SMTP id 7A3C1A8941
Anyone seeing their own IP should at least go to an online scanner like http://housecall.trendmicro.com or http://www.symantec.com
Have fun with them..
B.
______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
