-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, June 07, 2002 6:53 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Could you explain HELOBOGUS?
When this happens, it's a configuration error on the other end of the connection -- exactly where a spammer is very likely to make a configuration error (you'll often see them send "HELO $domain" or "HELO localhost.localdomain" and similar bogus hostnames). Scott, How does the "HELO $domain" work, I recieved a spam complaint that had a bogus host at my domain as the originating host in the headers (their spam software connected directly to my server), but the Imail log shows "HELO $domain". Why would any mail server want to allow a host to say "you fill it in"? The spammer was also nice enough to add the following notice to the top of the message: NOTICE: Our mailing software inserts the email address of the recipient into the headers, to and from addresses of this email. This is a new security technology developed to get our mails out to you and eliminate undeliverable mail from dead addresses that would bounce and waste bandwidth. Your email address or server is not being used to send this mail. No one else is recieving a mail with your email information. To be removed from this mailing, please use the removal link at the bottom. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
