Gang -- 

I'm sure this is an old trick, but in case you're learning all of this by
the seat of your pants like I am, maybe this will be helpful.

Received the following email today with the body as such:

=============================================
If the message will not displayed automatically,
follow the link to read the delivered message.

Received message is available at:
www.rhchurch.org/inbox/dale.brooks/read.php?sessionid-31993 
=============================================

The link, of course, does not point to a valid directory in our domain.  In
fact, the URL points to some really long string that begins with
"outbind://" and contains the following:

cid:[EMAIL PROTECTED]

Somehow, my firewall claims to have stripped an attachment from it, but
there's no evidence of such. (It usually replaces the errant attachment with
a simple text file explaining that it has been removed.)

Mail-Admin-in-Training-and-By-Force,

Ted

---
[This E-mail scanned for viruses by RHCC Declude Virus]

[AUTOMATED NOTE: Your mail server [66.196.248.34] is missing a reverse DNS entry. All 
Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry 
will cause your mail to be treated as spam on some servers, such as AOL.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to