Yes, I've seen this here at the San Diego Community College District, I
looked at the internet headers and here is what I find.
Sun, 16 Jun 2002 07:55:33 -0700 (PDT)
> > > X-Authentication-Warning: intergate.sdccd.cc.ca.us:
> > > [203.106.238.32] didn't
> > > use HELO protocol
I' ve also recieved one where the FROM: address has this in it today:
FROM: C:\Email\Headers\[EMAIL PROTECTED]
john
-----Original Message-----
From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 11:21 AM
To: Exchange Discussions
Subject: APNIC Spam imitating internal users.
I was wondering if anyone else is seeing some new type of Spam coming in
from APNIC? This Spam is forging the return address to internal users and
they all have the same subject/content, so they seem to be related.
Save up to 70% on Your Current Term Life Insurance
or
FW: Free Term Life Insurance Quotes. Save up to 70% on your policy.
The messages received seem to have all come from various APNIC sites:
203.197.145.194 - giasbm01.vsnl.net.in
203.186.145.243 - ctihk.com
203.204.70.30 - corp.giga.net.tw
Pete Pfefferkorn
Senior Systems Engineer/Mail Administrator
University of Cincinnati
51 Goodman Street
Cincinnati, OH 45221
Phone - (513) 556-9076
Fax - (513) 556-2042
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
