---------- Original Message ----------------------------------
From: "R. Scott Perry" <[EMAIL PROTECTED]>
>Comparing it to the headers generated by the copies of Sobig.F we've looked 
>at, it appears that it was indeed a bounce message.


Then I'm confused .. to me it appeared from the headers that it was received from 
another internal IP number, then sent to their exchange server ... am I missing 
something when I see the two IP numbers in the header?

David              
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to