My 2cents worth. ;-)
http://www.networksolutions.com/cgi-bin/whois/whois?STRING=www.newskies.net&SearchType=do

Chances are that he sender of the spam is not subscriber at that domain.
But rather that the SMTP server there is an 'open relay'.


On Thu, 6 Mar 2003 22:15:20 -0300, <[EMAIL PROTECTED]> wrote:

> ----- Original Message -----
> From: "L.D. Best" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, March 06, 2003 4:11 PM

> Related posting of today:

> from L.D.

>> SMTP forging is normal for spam.
>> Forging a well known domain "adds respectibility."

> from Steve:

>>   Yes, it's generally quite easily traceable... often to an
>> open relay somewhere... often to a Nigerian ISP.

> my former question:

>> > Does the "son" would have a dialup account with any of the above ?
>>   Dunno.  You didn't send the headers

> Sorry I forgot to quote headers:
> I supposed that everybody body in the list would receive it !
> It was send thorough Arachne.
> Isn't it ?

> ***************

> X-Track: 1: 100
> Return-Path: <[EMAIL PROTECTED]>
> Received: from 212.24.129.58  (EHLO ns.arachne.cz) (212.24.129.58)
> by mta530.mail.yahoo.com with SMTP; 05 Mar 2003 03:39:11 -0800 (PST)
> Received: from okey61083.com (63-109-249-173.reverse.newskies.net
> [63.109.249.173])
> by ns.arachne.cz (8.12.8/8.12.6) with SMTP id h25BFhmk002940
> for <[EMAIL PROTECTED]>; Wed, 5 Mar 2003 12:15:45 +0100
> Message-Id: <[EMAIL PROTECTED]>
> From: "Mohammed Abacha" <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Date: Wed, 5 Mar 2003 12:15:43 +0100

> *******

> I did some basic WHOIS search.

> "from okey61083.com (63-109-249-173.reverse.newskies.net [63.109.249.173])"

> To be sincere I won't doubt inmediately of something being ( or resembling )
> a NL domain ! (the full qualified domain, not the canonical name CNAME)

> Should  I report to he above message code ?  to  [EMAIL PROTECTED]

> I think about that if it can be something naive as as I got trapped myself
> here against my will !

> I never got any results at all when unsubscribing !

> Just a bit of fun  !

> Elliot

--
 Glenn
 http://arachne.cz/
 http://www.delorie.com/listserv/mime/
 http://www.cisnet.com/glennmcc/

Reply via email to