On Thu, 2003-09-04 at 13:56, T. Ribbrock wrote: > On Thu, Sep 04, 2003 at 01:34:08PM +0100, David wrote: > > If this is you, you need to detach from the internet and clean your > > machine! > > Just an aside: You *are* aware of the fact, that Sobig & Co. pick > random "From" addresses? I got tons of bounces from machines that > thought I'd sent them a virus - and I don't even *have* a 'doze box... >
Yes, the from address is easily spoofed, but this is the transport headers that shows the details of the transaction between the MDK server and the next hop. Less easily spoofed as it was injected into the mail headers by the MDK mail server. David.
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
