RE: Help with SPAM!
Title: Message It doesn't look like the original header info was included. Is there a way to extract that info and send just that? I am using Outlook XP for my client. Eric -Original Message-From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 4:18 PMTo: MS-Exchange Admin IssuesSubject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message-From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AMTo: Eric Brouwer (Corporate DET)Subject: Lowest Mortgage Rates Around We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: Refinance your existing mortgage lower your payments Consolidate your debt simplify your life Home Equity financing get extra cash Purchase a home there's never been a better time Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here to get started now! This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CRList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Re: Help with SPAM!
Title: Message heh You can not stop SPAM.. This is a very common spoof, no biggee. The only way to help curb SPAM is a 3rd party app, like Mail Marshall, Mail Essentials, or Praetor. - Original Message - From: Eric Brouwer (Corporate DET) To: MS-Exchange Admin Issues Sent: Monday, July 29, 2002 3:17 PM Subject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message-From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AMTo: Eric Brouwer (Corporate DET)Subject: Lowest Mortgage Rates Around We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: Refinance your existing mortgage lower your payments Consolidate your debt simplify your life Home Equity financing get extra cash Purchase a home there's never been a better time Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here to get started now! This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CRList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Help with SPAM!
Title: Message As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message-From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:23 PMTo: MS-Exchange Admin IssuesSubject: Re: Help with SPAM! heh You can not stop SPAM.. This is a very common spoof, no biggee. The only way to help curb SPAM is a 3rd party app, like Mail Marshall, Mail Essentials, or Praetor. - Original Message - From: Eric Brouwer (Corporate DET) To: MS-Exchange Admin Issues Sent: Monday, July 29, 2002 3:17 PM Subject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message-From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AMTo: Eric Brouwer (Corporate DET)Subject: Lowest Mortgage Rates Around We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: Refinance your existing mortgage lower your payments Consolidate your debt simplify your life Home Equity financing get extra cash Purchase a home there's never been a better time Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here to get started now! This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CRList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Re: Help with SPAM!
Title: Message You can spoof ANY from address. That does not make it accurate. It would also be illegal for them to do so. - Original Message - From: Eric Brouwer (Corporate DET) To: MS-Exchange Admin Issues Sent: Monday, July 29, 2002 3:24 PM Subject: RE: Help with SPAM! As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message-From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:23 PMTo: MS-Exchange Admin IssuesSubject: Re: Help with SPAM! heh You can not stop SPAM.. This is a very common spoof, no biggee. The only way to help curb SPAM is a 3rd party app, like Mail Marshall, Mail Essentials, or Praetor. - Original Message - From: Eric Brouwer (Corporate DET) To: MS-Exchange Admin Issues Sent: Monday, July 29, 2002 3:17 PM Subject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message-From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AMTo: Eric Brouwer (Corporate DET)Subject: Lowest Mortgage Rates Around We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: Refinance your existing mortgage lower your payments Consolidate your debt simplify your life Home Equity financing get extra cash Purchase a home there's never been a better time Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here to get started now! This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CRList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Help with SPAM!
Title: Message Yes, It can be sent to anyone as if it is coming from you on the FROM: line, and no you can't prevent it because SMTP doesn't require proof of sender. BUT, if they look at the headers they will see it never touches your server so you can at least prove it wasn't you. This unfortunately is a very common method to get the nasty responses sent to someone else. Chad P. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 3:25 PM To: [EMAIL PROTECTED] Subject: RE: Help with SPAM! As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message- http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.+++ The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.
RE: Help with SPAM!
Title: Message I can accept that, but with my limited header knowledge, this looks bad. I managed to get a copy of it: Received: from TESTMAIL.BERCOQC.COM (ftp.bercoqc.com [206.162.177.235]) by mailhost.vgreen.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)id PH40J5HA; Sun, 28 Jul 2002 19:49:15 -0400Received: from onemails5018.com([202.110.213.141]) by TESTMAIL.BERCOQC.COM (IBM OS/400 SMTP V05R01M00) with TCP; Sun, 28 Jul 2002 19:46:49 -0500From: "ebrouwer" [EMAIL PROTECTED]Reply-To: [EMAIL PROTECTED]To: [EMAIL PROTECTED]CC: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]Date: Sun, 28 Jul 2002 17:51:50 -0700Subject: Retire Early -- Earn Easy Online IncomeMIME-Version: 1.0X-Mailer: Microsoft Outlook Express 6.00.2600.X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.X-Precedence-Ref: l234056789zxcvbnmlkjhgfqwrtContent-Type: text/html; charset=us-asciiContent-Transfer-Encoding: 7bit I know this message went out to the CC list, as I got an OOO notice from one of the addressees. Is there anyhting I can do about this??? Eric -Original Message-From: Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:29 PMTo: MS-Exchange Admin IssuesSubject: RE: Help with SPAM! Yes, It can be sent to anyone as if it is coming from you on the FROM: line, and no you can't prevent it because SMTP doesn't require proof of sender. BUT, if they look at the headers they will see it never touches your server so you can at least prove it wasn't you. This unfortunately is a very common method to get the nasty responses sent to someone else. Chad P. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 3:25 PMTo: [EMAIL PROTECTED]Subject: RE: Help with SPAM! As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message-http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.+++ The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.
RE: Help with SPAM!
Illegal? Cite, please. -Original Message- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 03:28 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! You can spoof ANY from address. That does not make it accurate. It would also be illegal for them to do so. - Original Message - From: Eric Brouwer (Corporate DET) mailto:[EMAIL PROTECTED] To: MS-Exchange Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, July 29, 2002 3:24 PM Subject: RE: Help with SPAM! As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:23 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! heh You can not stop SPAM.. This is a very common spoof, no biggee. The only way to help curb SPAM is a 3rd party app, like Mail Marshall, Mail Essentials, or Praetor. - Original Message - From: Eric Brouwer (Corporate DET) mailto:[EMAIL PROTECTED] To: MS-Exchange Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, July 29, 2002 3:17 PM Subject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message- From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AM To: Eric Brouwer (Corporate DET) Subject: Lowest Mortgage Rates Around http://xnet.123alias.com/images/headline.gif We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: http://xnet.123alias.com/images/button_red.gif Refinance your existing mortgage http://xnet.123alias.com/index.php lower your payments http://xnet.123alias.com/images/mort_house_image2.jpg http://xnet.123alias.com/images/button_red.gif Consolidate your debt http://xnet.123alias.com/index.php simplify your life http://xnet.123alias.com/images/button_red.gif Home Equity financing http://xnet.123alias.com/index.php get extra cash http://xnet.123alias.com/images/button_red.gif Purchase a home http://xnet.123alias.com/index.php there's never been a better time http://xnet.123alias.com/images/spacer.gif http://xnet.123alias.com/images/spacer.gif http://xnet.123alias.com/images/spacer.gif Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here http://xnet.123alias.com/index.php to get started now! _ This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me http://xnet.123alias.com/remove.html Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CR List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List
RE: Help with SPAM!
Title: Message Unfortunately no. As I mentioned earlier, this is the method for someone else to get the complaint. Now as for bad?? The reply address is [EMAIL PROTECTED] which is probably a collector of good addresses IE they hit reply to complain and the real sender validate it as a good address. The first server appears to be from a host at 202.110.213.141 bounced off an open relay at 206.162.177.235. I am not taking the time to research, but you can at www.samspade.org if you like. With the reply being a .RU I is another fine piece of Asia SPAM ... not the canned variety. Unfortunately, your best bet may be to prepare a canned response stating the e-mail didn't originate from you and the real information can be found in the header. The chances of getting off their list is minimal, this is how they make their money. CJP -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 3:38 PM To: [EMAIL PROTECTED] Subject: RE: Help with SPAM! I can accept that, but with my limited header knowledge, this looks bad. I managed to get a copy of it: Received: from TESTMAIL.BERCOQC.COM (ftp.bercoqc.com [206.162.177.235]) by mailhost.vgreen.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id PH40J5HA; Sun, 28 Jul 2002 19:49:15 -0400 Received: from onemails5018.com([202.110.213.141]) by TESTMAIL.BERCOQC.COM (IBM OS/400 SMTP V05R01M00) with TCP; Sun, 28 Jul 2002 19:46:49 -0500 From: ebrouwer [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] CC: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Date: Sun, 28 Jul 2002 17:51:50 -0700 Subject: Retire Early -- Earn Easy Online Income MIME-Version: 1.0 X-Mailer: Microsoft Outlook Express 6.00.2600. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600. X-Precedence-Ref: l234056789zxcvbnmlkjhgfqwrt Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit I know this message went out to the CC list, as I got an OOO notice from one of the addressees. Is there anyhting I can do about this??? Eric -Original Message- From: Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:29 PM To: MS-Exchange Admin Issues Subject: RE: Help with SPAM! Yes, It can be sent to anyone as if it is coming from you on the FROM: line, and no you can't prevent it because SMTP doesn't require proof of sender. BUT, if they look at the headers they will see it never touches your server so you can at least prove it wasn't you. This unfortunately is a very common method to get the nasty responses sent to someone else. Chad P. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 3:25 PM To: [EMAIL PROTECTED] Subject: RE: Help with SPAM! As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message- http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.+++ The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document. +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact
RE: Help with SPAM!
Title: Message
Thank
you very much!
-Original Message-From: Purviance, Chad
[mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002
5:11 PMTo: MS-Exchange Admin IssuesSubject: RE: Help
with SPAM!
Unfortunately
no. As I mentioned
earlier, this is the method for someone else to get the
complaint.
Now as for
bad??
The reply address
is [EMAIL PROTECTED] which is probably a
collector of good addresses IE they hit reply to complain and the real
sender validate it as a good address.
The first server appears to be
from a host at 202.110.213.141 bounced off an open relay at 206.162.177.235.
I am not taking the time to research, but you can at www.samspade.org if you
like.
With the reply being
a .RU I is another fine piece of Asia SPAM ... not the canned
variety.
Unfortunately, your
best bet may be to prepare a canned response stating the e-mail didn't
originate from you and the real information can be found in the header. The
chances of getting off their list is minimal, this is how they make their
money.
CJP
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July
29, 2002
3:38
PMTo:
[EMAIL PROTECTED]Subject: RE: Help with
SPAM!
I can
accept that, but with my limited header knowledge, this looks bad. I
managed to get a copy of it:
Received: from
TESTMAIL.BERCOQC.COM (ftp.bercoqc.com
[206.162.177.235]) by mailhost.vgreen.com with SMTP (Microsoft Exchange
Internet Mail Service Version 5.5.2653.13)id PH40J5HA;
Sun, 28 Jul
2002
19:49:15 -0400Received:
from onemails5018.com([202.110.213.141]) by TESTMAIL.BERCOQC.COM (IBM OS/400
SMTP V05R01M00) with TCP; Sun, 28 Jul 2002 19:46:49 -0500From: "ebrouwer"
[EMAIL PROTECTED]Reply-To: [EMAIL PROTECTED]To: [EMAIL PROTECTED]CC: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]Date: Sun,
28 Jul 2002 17:51:50 -0700Subject: Retire Early -- Earn Easy Online
IncomeMIME-Version: 1.0X-Mailer: Microsoft Outlook Express
6.00.2600.X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2600.X-Precedence-Ref:
l234056789zxcvbnmlkjhgfqwrtContent-Type: text/html;
charset=us-asciiContent-Transfer-Encoding: 7bit
I know
this message went out to the CC list, as I got an OOO notice from one of the
addressees. Is there anyhting I can do about this???
Eric
-Original
Message-From:
Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:29
PMTo: MS-Exchange Admin
IssuesSubject: RE: Help
with SPAM!
Yes,
It can be sent to anyone as if it is coming from you on the FROM: line, and
no you can't prevent it because SMTP doesn't require proof of sender. BUT,
if they look at the headers they will see it never touches your server so
you can at least prove it wasn't you. This unfortunately is a very common
method to get the nasty responses sent to someone
else.
Chad
P.
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July
29, 2002
3:25
PMTo:
[EMAIL PROTECTED]Subject: RE: Help with
SPAM!
As
long as it's just coming to me and my company I can live with it. Can
it be sent to others outside my server and look like it's coming from
me???
-Original
Message-http://www.sunbelt-software.com/exchange_list_charter.htm
List
Charter and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
+++The information transmitted
is intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon,
this information by persons or entities other than the intended recipient is
prohibited. If you received this in error, please contact the sender and
destroy any copies of this document.+++
The information transmitted is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon,
this information by persons or entities
Re: Help with SPAM!
http://www.google.com/search?hl=enlr=ie=UTF-8q=Illegal+to+spoof+spam+addr essspell=1 Federal law is still pending, but many state laws have been put into place: http://www.spamlaws.com/state/summary.html Tom Meunier [EMAIL PROTECTED] wrote in message news:280098@exchangelist... Illegal? Cite, please. -Original Message- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 03:28 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! You can spoof ANY from address. That does not make it accurate. It would also be illegal for them to do so. - Original Message - From: Eric Brouwer (Corporate DET) mailto:[EMAIL PROTECTED] To: MS-Exchange Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, July 29, 2002 3:24 PM Subject: RE: Help with SPAM! As long as it's just coming to me and my company I can live with it. Can it be sent to others outside my server and look like it's coming from me??? -Original Message- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:23 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! heh You can not stop SPAM.. This is a very common spoof, no biggee. The only way to help curb SPAM is a 3rd party app, like Mail Marshall, Mail Essentials, or Praetor. - Original Message - From: Eric Brouwer (Corporate DET) mailto:[EMAIL PROTECTED] To: MS-Exchange Admin Issues mailto:[EMAIL PROTECTED] Sent: Monday, July 29, 2002 3:17 PM Subject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message- From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AM To: Eric Brouwer (Corporate DET) Subject: Lowest Mortgage Rates Around http://xnet.123alias.com/images/headline.gif We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: http://xnet.123alias.com/images/button_red.gif Refinance your existing mortgage http://xnet.123alias.com/index.php lower your payments http://xnet.123alias.com/images/mort_house_image2.jpg http://xnet.123alias.com/images/button_red.gif Consolidate your debt http://xnet.123alias.com/index.php simplify your life http://xnet.123alias.com/images/button_red.gif Home Equity financing http://xnet.123alias.com/index.php get extra cash http://xnet.123alias.com/images/button_red.gif Purchase a home http://xnet.123alias.com/index.php there's never been a better time http://xnet.123alias.com/images/spacer.gif http://xnet.123alias.com/images/spacer.gif http://xnet.123alias.com/images/spacer.gif Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here http://xnet.123alias.com/index.php to get started now! _ This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me http://xnet.123alias.com/remove.html Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CR List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Help with SPAM!
Title: Message
Interesting to note that if you don't secure your AS/400 it will relay
just a well as a misconfigured Exchange or Sendmail box. So much for relay proof
out of the box.
-Original Message-From: Purviance, Chad
[mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002
5:11 PMTo: MS-Exchange Admin IssuesSubject: RE: Help
with SPAM!
Unfortunately
no. As I mentioned
earlier, this is the method for someone else to get the
complaint.
Now as for
bad??
The reply address
is [EMAIL PROTECTED] which is probably a
collector of good addresses IE they hit reply to complain and the real
sender validate it as a good address.
The first server appears to be
from a host at 202.110.213.141 bounced off an open relay at 206.162.177.235.
I am not taking the time to research, but you can at www.samspade.org if you
like.
With the reply being
a .RU I is another fine piece of Asia SPAM ... not the canned
variety.
Unfortunately, your
best bet may be to prepare a canned response stating the e-mail didn't
originate from you and the real information can be found in the header. The
chances of getting off their list is minimal, this is how they make their
money.
CJP
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July
29, 2002
3:38
PMTo:
[EMAIL PROTECTED]Subject: RE: Help with
SPAM!
I can
accept that, but with my limited header knowledge, this looks bad. I
managed to get a copy of it:
Received: from
TESTMAIL.BERCOQC.COM (ftp.bercoqc.com
[206.162.177.235]) by mailhost.vgreen.com with SMTP (Microsoft Exchange
Internet Mail Service Version 5.5.2653.13)id PH40J5HA;
Sun, 28 Jul
2002
19:49:15 -0400Received:
from onemails5018.com([202.110.213.141]) by TESTMAIL.BERCOQC.COM (IBM OS/400
SMTP V05R01M00) with TCP; Sun, 28 Jul 2002 19:46:49 -0500From: "ebrouwer"
[EMAIL PROTECTED]Reply-To: [EMAIL PROTECTED]To: [EMAIL PROTECTED]CC: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]Date: Sun,
28 Jul 2002 17:51:50 -0700Subject: Retire Early -- Earn Easy Online
IncomeMIME-Version: 1.0X-Mailer: Microsoft Outlook Express
6.00.2600.X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2600.X-Precedence-Ref:
l234056789zxcvbnmlkjhgfqwrtContent-Type: text/html;
charset=us-asciiContent-Transfer-Encoding: 7bit
I know
this message went out to the CC list, as I got an OOO notice from one of the
addressees. Is there anyhting I can do about this???
Eric
-Original
Message-From:
Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 4:29
PMTo: MS-Exchange Admin
IssuesSubject: RE: Help
with SPAM!
Yes,
It can be sent to anyone as if it is coming from you on the FROM: line, and
no you can't prevent it because SMTP doesn't require proof of sender. BUT,
if they look at the headers they will see it never touches your server so
you can at least prove it wasn't you. This unfortunately is a very common
method to get the nasty responses sent to someone
else.
Chad
P.
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, July
29, 2002
3:25
PMTo:
[EMAIL PROTECTED]Subject: RE: Help with
SPAM!
As
long as it's just coming to me and my company I can live with it. Can
it be sent to others outside my server and look like it's coming from
me???
-Original
Message-http://www.sunbelt-software.com/exchange_list_charter.htm
List
Charter and FAQ
at:http://www.sunbelt-software.com/exchange_list_charter.htm
+++The information transmitted
is intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon,
this information by persons or entities other than the intended recipient is
prohibited. If you received this in error, please contact the sender and
destroy any copies of this document.+++
The information transmitted is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material.
RE: Help with SPAM!
What this tells me is that it's perfectly legal, except in some jurisdictions, in which neither Eric nor his company reside. And pending? We can only hope. Pending laws are called bills, and they don't make a whit of difference. There are bills to legalize marijuana, and bills to allow the recording industry to browse your hard drive too. They're not law, though. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 04:15 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! http://www.google.com/search?hl=enlr=ie=UTF-8q=Illegal+to+s poof+spam+addr essspell=1 Federal law is still pending, but many state laws have been put into place: http://www.spamlaws.com/state/summary.html Tom Meunier [EMAIL PROTECTED] wrote in message news:280098@exchangelist... Illegal? Cite, please. -Original Message- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 03:28 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! You can spoof ANY from address. That does not make it accurate. It would also be illegal for them to do so. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Help with SPAM!
Title: Message Sounds like Klez -Original Message-From: Eric Brouwer (Corporate DET) [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 16:18To: MS-Exchange Admin IssuesSubject: Help with SPAM! I thought I had buttoned up my Exchange server, but it appears I am wrong. Exchange 5.5, Sp 4 on NT 4.0 Sp 6a. I don't know if you will be able to see the header for the message I attached or not, but if you can look at it, I'd appreciate some insight! Someone is sending SPAM to me, that looks like it is coming from me. Is that a relay? How can I test if it is possible, and more importantly, how can I fix it??? Your help will be most appreciated! And if it is bad form forwarding a SPAM, I sincerely apologize! Eric -Original Message-From: Eric Brouwer (Corporate DET) Sent: Monday, July 29, 2002 10:32 AMTo: Eric Brouwer (Corporate DET)Subject: Lowest Mortgage Rates Around We can help find the perfect mortgage for you. Just click on the option below that best meets your needs: Refinance your existing mortgage lower your payments Consolidate your debt simplify your life Home Equity financing get extra cash Purchase a home there's never been a better time Here's how it works... After completing a short form, we will automatically sort through our database of over 2700 lenders to find the ones most qualified to meet your needs. Up to three lenders will then contact you and compete for your business. The search is free and there's no obligation to continue. It's that easy, so click here to get started now! This email was sent to you via Saf-E Mail Systems. Your email address was automatically inserted into the To and From addresses to eliminate undeliverables which waste bandwidth and cause internet congestion. Your email or webserver IS NOT being used for the sending of this mail. No-one else is receiving emails from your address. You may utilize the removal link below if you do not wish to receive this mailing. Please Remove Me Saf-E Mail Systems, PO Box 116-3015 San Rafael de Heredia, CRList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Help with SPAM!
One of the plus sides to our ECT Bill (recently passed..)..(we won't mention the namespace controle though...) B -Original Message- From: Tom Meunier [mailto:[EMAIL PROTECTED]] Sent: 29 July 2002 23:32 To: MS-Exchange Admin Issues Subject: RE: Help with SPAM! What this tells me is that it's perfectly legal, except in some jurisdictions, in which neither Eric nor his company reside. And pending? We can only hope. Pending laws are called bills, and they don't make a whit of difference. There are bills to legalize marijuana, and bills to allow the recording industry to browse your hard drive too. They're not law, though. -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 04:15 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! http://www.google.com/search?hl=enlr=ie=UTF-8q=Illegal+to+s poof+spam+addr essspell=1 Federal law is still pending, but many state laws have been put into place: http://www.spamlaws.com/state/summary.html Tom Meunier [EMAIL PROTECTED] wrote in message news:280098@exchangelist... Illegal? Cite, please. -Original Message- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Monday, July 29, 2002 03:28 PM To: MS-Exchange Admin Issues Subject: Re: Help with SPAM! You can spoof ANY from address. That does not make it accurate. It would also be illegal for them to do so. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
