It might be fun to see if the *real* originating IP is obtainable.   Actually I
am receiving around 150 per day, from about two dozen IP numbers all spoofing
kcfusion.org.  LOL

======================================
Stop spam on your domain, Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
Aspire to Inspire before you Retire or Expire!

  ----- Original Message -----
  From: Michael Dinowitz
  To: CF-Community
  Sent: Monday, February 02, 2004 11:38 AM
  Subject: Re:Guess who is sending out MyDoom virus mail???

  Ah, that means it was spoofing an email address from your domain and was
bounced from HoF back to you (which is not its origin). The fun of spoofed FROM

  >A virus (Worm/MyDoom.A2) was found.
  >
  >Scanner detecting a virus: H+B EDV AntiVir
  >
  >The mail originated from: <[EMAIL PROTECTED]>
  >
  >According to the 'Received:' trace, the message originated at:
  >   from LOCALHOST by LOCALHOST with ESMTP id 2E22C44478D60F41A068691BBF0977DA
  >Mon, 2 Feb 2004 00:04:40 -0500
  >
  >The message WAS NOT delivered to:
  ><[EMAIL PROTECTED]>:
  >   250 2.7.0 Ok, discarded, id=10861-03 - VIRUS: Worm/MyDoom.A2
  >
  >
  >   VDF version: 6.23.0.53 created 30 Jan 2004
  >    Date:  1.02.2004  Time: 22:53:42  Size: 22528
  >    ALERT: [Worm/MyDoom.A2 virus]
  >/var/amavis/amavis-20040201T223721-10861/parts/part-00003 <<< Contains
signature
  >of the worm Worm/MyDoom.A2
  >
  >
  >
  >
  >The message has been quarantined as:
  >   /var/virusmails/virus-20040201-225343-10861-03
  >
  >------------------------- BEGIN HEADERS -----------------------------
  >Received: from houseoffusion.com (houseoffusion.com [64.118.64.245])
  >by GULF.clickdoug.com (Postfix) with ESMTP id 98BB73E015D
  >for <[EMAIL PROTECTED]>; Sun,  1 Feb 2004 22:53:25 -0600 (CST)
  >Received: from LOCALHOST by LOCALHOST
  >with ESMTP id 2E22C44478D60F41A068691BBF0977DA
  >Mon, 2 Feb 2004 00:04:40 -0500
  >Content-Type: text/plain
  >Date: Mon, 2 Feb 2004 10:35:34 +0530
  >From: [EMAIL PROTECTED]
  >Message-ID: <[EMAIL PROTECTED]>
  >Precedence: bulk
  >Subject: Not Subscribed: test
  >To: [EMAIL PROTECTED]
  >-------------------------- END HEADERS ------------------------------
  >
  >
  >
  >======================================
  >Stop spam on your domain, Anti-spam solutions
  >http://www.clickdoug.com/mailfilter.cfm
  >For hosting solutions http://www.clickdoug.com
  >======================================
  >Aspire to Inspire before you Retire or Expire!
  >
  >
  >
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to