>I can not track this spammer down, can anyone help....
Yes.
>Received: from proxy3.ba.best.com ([EMAIL PROTECTED] [206.184.139.13])
>by shell3.ba.best.com (8.9.3/8.9.2/best.sh) with ESMTP id QAA20425
>for <[EMAIL PROTECTED]>; Wed, 7 Feb
>2001 16:47:07 -0800 (PST)
The recipient is a customer/client of best.com. best.com received the E-mail from
itself (proxy3.ba.best.com received it from shell3.ba.best.com).
>From: [EMAIL PROTECTED]
Hmmm... It looks like a best.com mail server added the "From:" header, most likely
from the MAIL FROM from the SMTP envelope.
>Received: from aol.com (dial2.lockhavenonline.com [64.9.65.2])
>by proxy3.ba.best.com (8.9.3/8.9.2/best.in) with SMTP id QAA02913
>for <[EMAIL PROTECTED]>; Wed, 7 Feb 2001 16:46:59 -0800 (PST)
best.com received it from 64.9.65.2, one of your dialups, although it claimed to be
aol.com. Check to see who was on then, nuke 'em, then get ready to beta test our
upcoming mail server hijack detector (part of Declude JunkMail Pro).
--
-Scott
Declude: Anti-virus and Anti-spam solutions for IMail. http://www.declude.com
--
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
