>How did they do it? The e-mail looks like it was generated from my >account (no other addresses are included)..... And how does one get >around Spammers that use this method?
This is a nastly little thing refered to as "spoofing". I had a HORRIBLE time getting rid of a spoofer I had a few months ago. Basically what happens is someone relays email through a server that is not properly set up to prevent relaying (sending email through one server while having it appear to be from another server). MOST legitimate ISPs have their servers set up to prevent relaying (mostly for their own protection -- it is a HUGE security risk.), but there are those out there that do permit it. These types of spammers can be stopped in most cases, but it does take some work on your part. Mine had gotten SO bad tha tI was getting over 50 rejects in a day (Can you imagine how many made it if I was getting that many rejects?) I was also getting some pretty nasty responses from people who didn't want the spam in their box. Here is a great responce I got from Neville (Neville, I hope you don't mind) in my quest to stop the abusers: >I had this happen earlier this year. >I traced the source of the emails from the headers and then emailed >abuse@.... >for example, in the headers below.... you would do a search for >203.122.3.217 >This will tell you the domain the mail is originating from. >You can use the Network Utility to do this if you are using OSX. > >Received: from cooper.spectranet.com ([203.122.63.156]) by >rimu.sirranet.co.nz (8.9.3/8.9.3) with ESMTP id XAA17106 for ><[EMAIL PROTECTED]>; Tue, 18 Jun 2002 23:11:02 +1200 (NZST) >Received: from viresh ([203.122.3.217]) by cooper.spectranet.com >(Netscape Messaging Server 4.15) with SMTP id GXWF1301.GJJ for > >When I did this search I got ... > >Whois has started ... > >% Rights restricted by copyright. See >http://www.apnic.net/db/dbcopyright.html >% (whois6.apnic.net) > >inetnum: 203.122.0.0 - 203.122.63.255 >netname: SPECTRANET >descr: SPECTRA NET LIMITED >descr: FIRST FIBRE BROADBAND NETWORK IN NEW DELHI, INDIA. >country: IN >admin-c: UP1-AP >tech-c: UP1-AP >mnt-by: APNIC-HM >mnt-lower: MAINT-IN-SPECTRA-NET-LTD >changed: [EMAIL PROTECTED] 20000504 >source: APNIC > >person: Uday Punj >address: 17-18, Nehru Place >address: ? > New Delhi - 110019 >address: India > >Note this is just an example... I would email [EMAIL PROTECTED] in >this case. > > >I also had this suggestion from another on the group ... > >The one thing I learned very fast is not to use the word SPAM when >explaining your problem. Refer to it as 'Identity Theft' and 'forgery of >your email address.' Identity Theft is what it is, and it's the only >thing that seems to get anyone's attention. Good Luck! Tracy Lee ___________________________________________________________________________ To unsubscribe send a mail message with a SUBJECT line of "unsubscribe" to <[EMAIL PROTECTED]> or <[EMAIL PROTECTED]>
