Hi Everyone,

Thanks for your help tracking down the spammer. Some details below, latest
news from [EMAIL PROTECTED] is this:

"Latest news. The user stated below has resigned a few months ago and his
account has been disabled.  Apparently, he used our email server as a relay
server to deliver his mails. We are right now in the midst of upgrading our
smtp server to disable this features."

Since he is continuing with his forgeries, any more suggestions for what I
(we) can do?

Lee Hodgson
The real [EMAIL PROTECTED]

----- Original Message -----
From: "Lee Hodgson - DomainGuideBook.com" <[EMAIL PROTECTED]>
To: "WebMaster" <[EMAIL PROTECTED]>
Sent: Wednesday, September 20, 2000 1:53 PM
Subject: Re: Email forgery


> Hi Webmaster.
>
> Thanks for your quick response. I appreciate it. If I could be so bold to
> ask, what action do you propose taking against him?
>
> Lee Hodgson
> http://DomainGuideBook.com
>
> ----- Original Message -----
> From: "WebMaster" <[EMAIL PROTECTED]>
> To: "Lee Hodgson - DomainGuideBook.com" <[EMAIL PROTECTED]>;
> <[EMAIL PROTECTED]>
> Sent: Wednesday, September 20, 2000 1:40 PM
> Subject: Re: Email forgery
>
>
> > Thanks for your info. Action will be taken against him.
> >
> > Good day.
> >
> > ----- Original Message -----
> > From: Lee Hodgson - DomainGuideBook.com <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, September 20, 2000 2:35 PM
> > Subject: Email forgery
> >
> >
> > > Hello Postmaster,
> > >
> > > Someone using your mail service has been posting forged emails to
> > > [EMAIL PROTECTED] - They are using "Bruce P." as their name,
and
> > > forging the emails as though they come from [EMAIL PROTECTED] -
> this
> > > is my email address, and the emails that they are sending are
tarnishing
> > the
> > > reputation of me and my business.
> > >
> > > Here is the output from spamcop.net:
> > > -------
> > > Received: from domainguidebook.com ([203.121.22.135]) by
> > mail3.maxis.net.my
> > > with Microsoft
> > > SMTPSVC(5.5.1877.467.46); Wed, 20 Sep 2000 01:18:12 +0800
> > > "nslookup 117.130.75.202.dul.maps.vix.com." (checking ip) [show] not
> found
> > > Possible spammer: 203.121.22.135
> > > "nslookup domainguidebook.com" (checking ip) [show] ip = 64.37.115.147
> > > "nslookup domainguidebook.com" (checking ip) [show]
domainguidebook.com
> > not
> > > 203.121.22.135, discarded as fake.
> > > Taking name from IP...
> > > "nslookup 203.121.22.135" (getting name) [show] no name
> > > "dig mx rly-mx1.maxis.net.my" (digging for Mail eXchanger) [show]
> > > 203.121.22.135 is not MX for rly-mx1.maxis.net.my
> > > "nslookup 135.22.121.203.rbl.maps.vix.com." (checking ip) [show] not
> found
> > > "nslookup 135.22.121.203.inputs.orbs.org." (checking ip) [show] not
> found
> > > Chain test:mail3.maxis.net.my =? rly-mx1.maxis.net.my
> > > abuse.net [EMAIL PROTECTED]
> > > abuse.net [EMAIL PROTECTED]
> > > Chain verified mail3.maxis.net.my = rly-mx1.maxis.net.my
> > > "nslookup 135.22.121.203.dul.maps.vix.com." (checking ip) [show] not
> found
> > > Saved 203.121.22.135 for ORBS submission.
> > > Received line accepted
> > > 'From' server untrusted; all following Received lines are untrusted.
> > >
> > > Tracking ip 203.121.22.135:
> > > "nslookup 203.121.22.135" (getting name) [show] no name
> > > "dig -x 203.121.22.135 soa " (digging for Start Of Authority) [show]
> > invalid
> > > address - too long - not found
> > > "dig -x 203.121.22 soa " (digging for Start Of Authority) [show]
invalid
> > > address - too long - not found
> > > "whois [EMAIL PROTECTED]" (Asking arin for coordinator)
> [show]
> > > Arin redirects to apnic
> > > "whois [EMAIL PROTECTED]" (Checking apnic database)
[show]
> > > "whois [EMAIL PROTECTED]" (Checking
> > > apnic database) [show] contact:[EMAIL PROTECTED]
> > > contact:[EMAIL PROTECTED]
> > >
> > > Statistics:
> > > ISP ([EMAIL PROTECTED]) score:0
> > > IP (203.121.22.135) score:0
> > > Right now, this email would be detained by SpamCop filters: blocked by
> > ORBS
> > > Would send complaint to [EMAIL PROTECTED]
> > > ----------
> > >
> > > It seems to identify the culprit quite clearly, and from other reports
I
> > > have received from people at OpenSRS.org, this party has been
> responsible
> > > for other dirty tricks as well.
> > >
> > > I hope you take this matter as seriously as I do. Forging emails is a
> very
> > > serious matter, and one not to be ignored.
> > >
> > > Please contact me as soon as possible to let me know what action you
> will
> > be
> > > taking against this party.
> > >
> > > Yours,
> > >
> > > Lee Hodgson
> > > [EMAIL PROTECTED]
> > > http://DomainGuideBook.com
> > >
> > >
> > >
> >
> >
>

Reply via email to