Alex, FWIW the message is not just spam - it is a known virus. (see below) http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html
Paul, If I am reading it correctly, his GB is description, it looks like you are running Following your description, it looks like FW2.XiG.COM is his GB and he's running (3.0.0) HTH, -Mark -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Paul Emerson Sent: Monday, August 27, 2001 2:28 PM To: Alex Baram Cc: [EMAIL PROTECTED] Subject: Re: spam mail --------------------- Attention ----------------------------- A digest version of this list is now available. Send email to [EMAIL PROTECTED], with the following message: subscribe gb-users-digest your_email_address Then unsubscribe from this list. ------------------------------------------------------------- GNAT Box User Forum http://www.gnatbox.com/cgi-bin/Ultimate.cgi Send postings to: [EMAIL PROTECTED] Access the list archives at: http://www.gnatbox.com/gb-users/ ------------------------------------------------------------- I don't see anywhere in the header that this email came through the GNAT Box SMTP proxy. Normally you'd have a line like: Received: from night.xig.com (207.247.80.135) by XXXXX (3.2.1). Where XXXXX is the name of the GB firewall and (3.2.1) is the version of the firewall/smtp proxy. Paul > >Hi group, > > I'm using gnatbox e-mail proxy on v3 Gnatbox Pro. The proxy forwards >mail from the Internet to an internal sendmail mail hub. I have seen a >lot of spam come and go, but one caught my eye (see below). It is missing >a 'To' header. Is this valid? How can it come through? Also note that >the 'Return-Path' header is empty. > >Thanks for your help! > >Alex Baram > > >---------- Forwarded message ---------- >Return-Path: <> >Received: from cogito.cam.org (FW2.XiG.COM [207.247.80.135]) > by xig.com (8.9.3/8.9.3) with SMTP id KAA34683 > for <[EMAIL PROTECTED]>; Mon, 27 Aug 2001 10:58:27 -0600 (MDT) > (envelope-from ) >Received: from cogito.cam.org (198.168.100.2) by FW2.XiG.COM (3.0.0). >Received: from ecopdc (dialup-209-139-205-205.hip.cam.org [205.205.139.209]) > by cogito.cam.org (8.11.0/8.11.0.Beta1) with SMTP id f7RGw7h26600 > for <[EMAIL PROTECTED]>; Mon, 27 Aug 2001 12:58:08 -0400 >Date: Mon, 27 Aug 2001 12:58:08 -0400 >Message-Id: <[EMAIL PROTECTED]> >From: Hahaha <[EMAIL PROTECTED]> >Subject: Blanche neige et ...les sexe nains >MIME-Version: 1.0 >Content-Type: multipart/mixed; boundary="--VEHM3S1QZ4TAB4TQVCP6Z4HAJ856NGL" > > >---------------------------------------------- >To Unsubscribe: send mail to [EMAIL PROTECTED] >with "unsubscribe gb-users your_email_address >in the body of the message -- ---------------------------------------------------------------------------- Paul Emerson Tel: +1.407.380.0220 x1106 Global Technology Associates, Inc. Fax: +1.407.380.6080 3505 Lake Lynda Drive Mobile: +1.407.310.8563 Suite 109 Email: [EMAIL PROTECTED] Orlando, Florida 32817 USA Web: http://www.gta.com Mobile Email: [EMAIL PROTECTED] ---------------------------------------------------------------------------- ---------------------------------------------- To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe gb-users your_email_address in the body of the message
