Hi,

On Mon, 22 Jul 2002 11:06:21 +0100
  Steve Linford <[EMAIL PROTECTED]> wrote:
>  From Matthew Hill, received 18/7/02, 6:39 am -0700 (GMT):
> > How do you make some one stop forging mail?  I have a 
> >spammer who
> > is forging our domain.  I am still getting 100's bounces to 
> >unknown
> > users.  I have removed the unknown account.  Is there a way 
> >to make
> > them stop using our domain name?
> 
> Many spammers nowadays use spamware that rotates headers 
> including the Return-Path, so each spam will forge many 
> different domains. They generally don't just forge one 
> Return-Path domain because that would bomb the domain with 
> millions of bounces and the domain owner might sue, so the 
> rotation forges lots of domains in rotation to spread the 
> bounces (and flames) around.


I recently posted to the CGate list the message included in 
some recent spam sent to my users. It admist that it sets the 
"from" and "reply-to" addresses to the same address as the to 
address to "prevent wasted bandwidth from undeliverable 
emails". They go on to say they they didn't use your mail or 
web server to deliver the mail and no one else received email 
coming from you.

I would think for those states that have anti-spam laws this 
would be illegal as they are forging your name as the from and 
reply to.

[snip]

(if you're in California and the spammer is in California 
> then the California Attorney General's Office wants to hear 
> from you)


I believe the comapny making this spam tool is based in 
Croatia. So it is highly unlikely that anyone could go anfter 
them directly, but the users of their garbage could be valid 
targets for a lawsuit or legal action (I hope anyway).


[snip]

> 
> -- 
>    Steve Linford
>    Ultradesign Xtreme Network
>    http://www.uxn.com
> 

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to