I've had a swarm of stock-quote spam in the last few days.  Declude 1.81, Imail 7.15.  Appears from the headers there are no Declude tests running at all on these msgs, but there are Declude headers added.  Majority are null senders.  Various IPs.  Some have my addy referenced as an X-RCPT, some do not.  Majority also have an SMTP-FWD header.  Those that are to legitimate recipients on my host, none of them (that I've checked thus far) have a fowarding addy set.  Some but not all are being sent using The Bat! client.  My Declude logs run up to 800MB per day, difficult to search them for details.
 
Received: from SMTP32-FWD by wcnet.net
  (SMTP32) id A00000E38; Mon,  5 Jun 2006 00:48:32 -0500
Received: from SMTP32-FWD by wcnet.net
  (SMTP32) id A00000F48; Mon,  5 Jun 2006 00:48:32 -0500
Received: from ZIA [203.81.233.129] by wcnet.net with ESMTP
  (SMTPD32-7.15) id A5A187B7034E; Mon, 05 Jun 2006 00:48:17 -0500
Date: Mon, 5 Jun 2006 05:48:33 -0300
From: "Blair Montano" [EMAIL PROTECTED]
X-Mailer: The Bat! (3.78.20) Personal
Reply-To: [EMAIL PROTECTED]
X-Priority: 3 (Normal)
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: You Too Can Profit From Microcaps
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Declude-Sender: <> [203.81.233.129]
X-Declude-Spoolname: Dc5a187b7034ef2f2.SMD
Status: R
X-UIDL: 323778081
 
 

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

Reply via email to