A message selected at random (from <>@nokia.com) had as the last "received from" IP one that resolved to the Army National Guard.
Anyway, I'll ask further questions on the Junkmail list, since this is spam-related, not virus-related. ----- Original Message ----- From: "Donn Bly" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 22, 2004 9:55 AM Subject: RE: [Declude.Virus] Attack? If the bounce messages give you enough header information to track the orignating IP you can complain to the guy's upstream, but my experience is that most of these guys these days are using distributed zombie machines and all you end up with is a bunch IP's of spyware infected residential users -- but it is still worth checking. Since the messages don't originate from you or travel through your network, there are no technical means that you can deploy to prevent this from happening. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Stan Buck > Sent: Wednesday, September 22, 2004 8:38 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Attack? > > > I turned on the nobody alias for a few minutes, and the > messages are actual > bounce messages from postmasters who are getting spam from > someone forging > our return address. Very active spammer. Anything we can do? > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
