That's the default behaviour of (some ?) mailservers,
if the name of the sender doesn't contain a domain
name the local domain is appended.
That's what the header tells about the way the messages took:
Received: from unknown (HELO mail1.netfolio.com) (38.136.195.106)
by h31.sny.collab.net with SMTP; 15 May 2001 03:42:46 -0000
Received: by mymail.netfolio.com with Internet Mail Service (5.5.2650.21)
id <285ZKVN2>; Mon, 14 May 2001 23:40:19 -0400
Received: from gatekeeper1 (10.1.50.1 [10.1.50.1]) by mail1.netfolio.com
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
id 285ZKVNB; Mon, 14 May 2001 23:40:09 -0400
> -----Urspr�ngliche Nachricht-----
> Von: Jeff Kilbride [mailto:[EMAIL PROTECTED]]
> Gesendet: Dienstag, 15. Mai 2001 18:49
> An: [EMAIL PROTECTED]
> Betreff: Re: HELP needed for InterScan NT Alert
>
>
> I have the same question. All these messages have
> '[EMAIL PROTECTED]' on them for me. I was
> afraid that my
> system was sending virus alerts somehow, but I don't have
> anything from
> NetFolio installed on my machine. (that I know of...)
>
> Now I'm thinking that it just appends the domain name when I
> download the
> message, because I don't think these messages are originating from my
> machine.
>
> Any insight would be appreciated.
>
> Thanks,
> --jeff
>
> ----- Original Message -----
> From: "Egger Lothar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, May 15, 2001 4:19 AM
> Subject: HELP needed for InterScan NT Alert
>
>
> > hello
> >
> > i talked to our sysadmins, but we don't have any Interscan
> Virus Wall.
> >
> > so why what or who uses our domainname for posting mail to
> this usergroup.
> >
> > in the mail header it looks like that mail1.netfolio.com
> sends this mail,
> > but why with a from: [EMAIL PROTECTED] ?
> >
> > any ideas ?
> >
> >
> > regards
> > lothar
> >
> > mailheader:
> >
> > Received: from mail.cardsys.at ([172.17.200.31]) by
> srv-csexch.cardsys.at
> > with SMTP (Microsoft Exchange Internet Mail Service Version
> 5.5.2650.21)
> > id 2GH96AKV; Tue, 15 May 2001 12:24:05 +0200
> > Received: from apache.org (h31.sny.collab.net [64.208.42.41])
> > by mail.cardsys.at (8.9.3/8.9.3) with SMTP id OAA01953
> > for <[EMAIL PROTECTED]>; Tue, 15 May 2001 14:26:29 +0200
> > Message-Id: <[EMAIL PROTECTED]>
> > Received: (qmail 112 invoked by uid 500); 14 May 2001 22:03:59 -0000
> > Mailing-List: contact [EMAIL PROTECTED];
> run by ezmlm
> > Precedence: bulk
> > Reply-To: [EMAIL PROTECTED]
> > list-help: <mailto:[EMAIL PROTECTED]>
> > list-unsubscribe:
> <mailto:[EMAIL PROTECTED]>
> > list-post: <mailto:[EMAIL PROTECTED]>
> > Delivered-To: mailing list [EMAIL PROTECTED]
> > Received: (qmail 99890 invoked from network); 14 May 2001
> 22:03:46 -0000
> > Received: from unknown (HELO mail1.netfolio.com) (38.136.195.106)
> > by h31.sny.collab.net with SMTP; 14 May 2001 22:03:46 -0000
> > Received: by mymail.netfolio.com with Internet Mail Service
> (5.5.2650.21)
> > id <285ZKVDQ>; Mon, 14 May 2001 18:01:18 -0400
> > Received: from gatekeeper1 (10.1.50.1 [10.1.50.1]) by
> mail1.netfolio.com
> > with SMTP (Microsoft Exchange Internet Mail Service Version
> 5.5.2650.21)
> > id 285ZKVDK; Mon, 14 May 2001 18:01:12 -0400
> > From: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Subject: InterScan NT Alert
> > Date: Mon, 14 May 2001 18:05:53 -0400
> > X-Mailer: Internet Mail Service (5.5.2650.21)
> > X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N
> >
>
>
