>The b*******s are getting sneaky. The log files do not show the same info as
>below and obviously the headers are not correct as an email from hotmail via
>attbi.com with a yahoo return?
This is actually fairly common:
>Received: from StarGazer.TenForward.com [65.161.10.3] by tenforward.com
> (SMTPD32-7.12) id A21C2B30124; Mon, 19 Aug 2002 07:35:08 -0700
>Received: from hotmail.com (c-24-30-244-219.va.client2.attbi.com
>[24.30.244.219])
> by StarGazer.TenForward.com (Postfix Relay Hub) with SMTP id 3081ACD2D
> for <[EMAIL PROTECTED]>; Mon, 19 Aug 2002 07:35:05 -0700 (PDT)
>From: <Varvar>, [EMAIL PROTECTED]
The spammer had to tell his spamware what his computer name was, and what
his E-mail address was. He just decided to enter "hotmail.com" for the
name of the computer, and "[EMAIL PROTECTED]" as the E-mail address.
The spammer didn't really have to resort to anything tricky (except perhaps
figuring that some people would automatically whitelist hotmail.com, or
perhaps send complaints there rather than to attbi.com).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
