> -----Original Message-----
> From: Barry Smoke [mailto:[EMAIL PROTECTED]
> Sent: Freitag, 27. August 2004 17:25
> To: [EMAIL PROTECTED]
> Subject: Re: 1
> 
> 
> these e-mails look strange,
> virus?

Of course.

The spammer is submitting the mails to mail.modssl.org with the "From"
field spoofed to "[EMAIL PROTECTED]". I guess the mailer will have to
start doing a reverse DNS lookup to verify that incoming mails are
really coming from the address they say they are..

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored. 

X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from sgtulmg01.sabre.com (sgtulmg01.sabre.com
[151.193.220.17])
        by master.modssl.org (Postfix) with ESMTP id CD65CA8938
        for <[EMAIL PROTECTED]>; Fri, 27 Aug 2004 18:02:42 +0200
(CEST)
Received: from unknown (HELO SGNSOLO19151501.com) (10.16.131.25)
  by sgtulmg01.sabre.com with SMTP; 27 Aug 2004 10:56:31 -0500
X-Ironport-AV: i="3.84,116,1091422800"; 
   d="scan'217,208?gif'217,208"; a="219635635:sNHT279802964"
Date: Fri, 27 Aug 2004 10:57:36 -0600
To: "Modssl-users" <[EMAIL PROTECTED]>
From: "Rse" <[EMAIL PROTECTED]>
Subject: 1
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="--------eoxkvqogjlpnqfooepkr"
Sender: [EMAIL PROTECTED]
Precedence: bulk
Reply-To: [EMAIL PROTECTED]
X-Sender: "Rse" <[EMAIL PROTECTED]>
X-List-Manager: Majordomo [version 1.94.5]
X-List-Name: modssl-users
X-Mlf-Reason: no-judgement
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 27 Aug 2004 16:04:29.0243 (UTC)
FILETIME=[886DF8B0:01C48C4F]

----------eoxkvqogjlpnqfooepkr
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

----------eoxkvqogjlpnqfooepkr
Content-Type: application/octet-stream; name="1.gif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="1.gif"


----------eoxkvqogjlpnqfooepkr--sxibm 

> 
> Rse wrote:
> 
> >
> >
> >
> 
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
>

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company. 


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
  • Re: 1 Barry Smoke
    • Boyle Owen

Reply via email to