One of our pupils impersonated our administrator account.

I got the ip addresses of the mail server that they used from the headers of the 
message, used www.geektools.com to track down who owns the ip address range, and then 
conacted their isp.

About 3 weeks later the isp issued a warning to the user.

Whilst the isp would not release any contact details of the user, their parents 
contacted the school asking what it was all about, thus we were able to punish pupil 
at school as well. 


Andrew Snowden
ICT Co-ordinator
Cheadle Hulme School, UK

---------- Original Message ----------------------------------
From: "R. Scott Perry" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Wed, 03 Jul 2002 08:36:06 -0400

>
>> > Unless  the  spammer  is actually using the mail account (IE has the
>> > password   for   it),   the   only   actions   you   can   take  are
>> > non-technological  (IE  convincing  or  forcing the spammer to stop,
>> > using whatever creative methods you can come up with).
>>
>>One still-technological method that is *fairly* sound is using a Combo
>>Rule to filter out messages that are
>
>Not in this case.
>
>The problem here is that the spammer is sending out E-mail with the 
>customer's return address.  The spam is being sent from other mailservers 
>to other mailservers, so it can't be filtered.
>
>Unless you have access to all mailservers out there, it just can't be 
>stopped with technological measures.
>
>                                                    -Scott
>---
>Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
>IMail.  http://www.declude.com
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html 
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>Please visit the Knowledge Base for answers to frequently asked
>questions:  http://www.ipswitch.com/support/IMail/
>

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to