On Mon, 3 Jun 2013 14:28:36 +0200 Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
> you should look at Received: headers to see who passed the mail to > you and complain to abuse@ there. If the mail came from nacha.org, the > ab...@nacha.org is the right place to send complaints.. There were no Received: headers in my samples. They were directly injected by compromised Windows boxes. Regards, David.