Hijack is processed for JunkMail John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Brian Cunningham > Sent: Wednesday, March 12, 2003 4:23 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] How did this Spammer get through? > > What's strange is that the only thing consistent around all of the spam emails is the > IP address 169.207.38.237, which is listed with SpamCop. > > Should declude pick that up? I've got spamcop listed as an automatic hold, but > somehow he keeps getting through. > > Thanks. > > b > > > ---------- Original Message ---------------------------------- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Wed, 12 Mar 2003 19:11:04 -0500 > > > > >>Here's an example of the email he's trying to relay through: > > > >The key information isn't in the headers in this case -- it's in the IMail > >SMTP log file. Most importantly are the "RCPT TO:" lines, which will show > >who the E-mail was actually addressed to, and whether or not some hack was > >used to relay the E-mail. If you post the IMail SMTP log file entries, I > >should be able to let you know what is going on. > > -Scott > > > >--- > >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > >--- > >[This E-mail was scanned for Viruses and Spam by Richmond.com] > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.