RE: Strange Delivery Method
So what don't you understand? The To: address was spoofed and you were added to the Bcc: section, so your address won't show up in the headers. If you take a look at the NDRs in your Admin mailbox, you will see an NDR for the address indicated below. It's spam, pure and simple...delete it or block it or both. -Original Message- From: NPARRAY [mailto:[EMAIL PROTECTED] Sent: Thursday, November 27, 2003 7:00 AM To: Exchange Discussions Subject: Strange Delivery Method Hello All, I received a mail item in my inbox this morning where the recipient is set to another user. This is an account that had been deleted about two years ago from the system. Since then the system had crashed and had to be restored. The mail itself is spam but my major concern about this one is the receipt of mail destined for another account. I've looked at the mail header and the recipient is indeed indicating another recipient. I've included the header below. Anoyone has any explanation for what happened here and does this indicate some weakness in my setup that I should be concerned about? TIA Navin Received: from lns-p19-8-82-65-145-246.adsl.proxad.net ([82.65.145.246]) by exchange.plipdeco.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id W4TT8ZAN; Thu, 27 Nov 2003 10:45:28 -0400 Received: from [2.220.72.61] by lns-p19-8-82-65-145-246.adsl.proxad.net id 5287070-99656; Thu, 27 Nov 2003 16:34:33 +0200 Message-ID: [EMAIL PROTECTED] From: Earnest Wilkinson [EMAIL PROTECTED] Reply-To: Earnest Wilkinson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Next day shipping on your medication!beograd Date: Thu, 27 Nov 2003 16:34:33 GMT X-Mailer: merle savage taxidermy2561 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=_5CF0E2.73ED1A__ X-Priority: 3 X-MSMail-Priority: Normal --_5CF0E2.73ED1A__ Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --_5CF0E2.73ED1A__-- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Strange Delivery Method
The To: field showing in the headers is not necessarily the recipient in the envelope, i.e., the RCPT TO:[EMAIL PROTECTED] command. Look carefully at spam you receive. Often you won't even show up in the To: field. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of NPARRAY Sent: Thursday, November 27, 2003 7:00 AM To: Exchange Discussions Subject: Strange Delivery Method Hello All, I received a mail item in my inbox this morning where the recipient is set to another user. This is an account that had been deleted about two years ago from the system. Since then the system had crashed and had to be restored. The mail itself is spam but my major concern about this one is the receipt of mail destined for another account. I've looked at the mail header and the recipient is indeed indicating another recipient. I've included the header below. Anoyone has any explanation for what happened here and does this indicate some weakness in my setup that I should be concerned about? TIA Navin Received: from lns-p19-8-82-65-145-246.adsl.proxad.net ([82.65.145.246]) by exchange.plipdeco.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id W4TT8ZAN; Thu, 27 Nov 2003 10:45:28 -0400 Received: from [2.220.72.61] by lns-p19-8-82-65-145-246.adsl.proxad.net id 5287070-99656; Thu, 27 Nov 2003 16:34:33 +0200 Message-ID: [EMAIL PROTECTED] From: Earnest Wilkinson [EMAIL PROTECTED] Reply-To: Earnest Wilkinson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Next day shipping on your medication!beograd Date: Thu, 27 Nov 2003 16:34:33 GMT X-Mailer: merle savage taxidermy2561 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=_5CF0E2.73ED1A__ X-Priority: 3 X-MSMail-Priority: Normal --_5CF0E2.73ED1A__ Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --_5CF0E2.73ED1A__-- _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
