On Fri, Mar 30, 2001 at 09:13:10AM +0530, Suresh Ramasubramanian typed:
> jay rearranged electrons thusly:
>
> > just curious - how did you manage to find they were the guys, who were
> > spamming ? From the similar email body template ?
>
> Yes. That, and google. Till recently they were using their vsnl address in
> spams - now they're using MAIL FROM:<>
>
> chk_header rulesets in sendmail ...
> http://www.sendmail.org/~ca/email/chk89-opt.html - for anyone wanting to
> block those a**h*l*s.
>
> Their X-Mailer tag is distinctive - block on that. Dont go about blocking
> MAIL FROM:<> - that's the address for bounces / mailer-daemon messages (rfc
> 1123).
Received: from bom8.vsnl.net.in (unknown [203.199.78.236])
by bom8.vsnl.net.in (Postfix) with SMTP
id 30F9388BE; Fri, 23 Mar 2001 09:44:04 +0500 (GMT+0500)
Since the above header line specifies the IP address from which the mail
was received and the time, I suppose VSNL Bombay should be able to track
down the subscriber who was using that IP at that specific time (If they
really care to). Don't you think so ?
Kala
----------------------------------------------
Find out more about this and other Linux India
mailing lists at http://lists.linux-india.org/
