Matt,

 

This is an auto generated message from some type of program on your user’s pc.  I think it may be called spamkiller or something like that.

 

I ‘used’ to get these from one of our users.  The reason it went to the wrong person was because the program would send the abuse letter to incomplete email addresses such as <abuse@> and <postmaster@>. The Modus mail server would automatically append our domain name and it would then come to us.

 

Look at the headers of the abuse letter.  I’m guessing the “To:” field has an incomplete email address.  I have since configured our mail server to not accept emails with invalid email addresses.

 

- Del

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Edwards
Sent:
Thursday, November 20, 2003 11:58 AM
To: [EMAIL PROTECTED]
Subject: [Modus] Help reading a header

 

So in essence the complainer in this case sent the complaint to the wrong person (me).  Just to make sure I understand what you are saying.

 

____________________

Matt Edwards

Net Doctors, Inc.

864-882-1650

____________________


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eddie Stauble
Sent:
Thursday, November 20, 2003 12:51 PM
To:
[EMAIL PROTECTED]
Subject: [Modus] Help reading a header

 

Matt,

 

The message was sent to [EMAIL PROTECTED].  It could also have been bcc'd to others.

 

It was sent to you from the ip address 212.199.108.218.  The other stuff can be spoofed, that cannot be.

 

If you look up that ip, the mail originated from, and complaints should be directed to:

 

inetnum:      212.199.108.128 - 212.199.108.255
netname:      Gilat-ISP-Benin1
descr:        Please Send Abuse/SPAM complaints
descr:        To [EMAIL PROTECTED]
country:      GB
admin-c:      DR5299-RIPE
tech-c:       DR5299-RIPE
status:       ASSIGNED PA
notify:       [EMAIL PROTECTED]
changed:      [EMAIL PROTECTED] 20030617
mnt-by:       AS9116-MNT
mnt-lower:    AS9116-MNT
source:       RIPE

I hope that helps,
Eddie Stauble
NCS
 

----- Original Message -----

From: Matt Edwards

Sent: Thursday, November 20, 2003 11:19 AM

Subject: [Modus] Help reading a header

 

I just got a complaint from someone about sending unsolicited mail through my server.  The person was nice enough to send the header but I am confused trying to read it.  Was it sent through my server or was it just sent to one of my users and CC to her.

 

My server is omega.netmds.com and domain on our server is netmds.com

 

Thanks for any help in advance.  Following is two headers and messages that she sent back to our abuse e-mail…

 

I have received the attached unsolicited e-mail from someone at your domain.

 

I do not wish to receive such messages in the future, so please take the appropriate measures to ensure that this unsolicited e-mail is not repeated.

 

Return-path: <[EMAIL PROTECTED]>

Received: from n2now74.com (212.199.108.218.forward.012.net.il [212.199.108.218]) by omega.netmds.com (Vircom SMTPRS 3.0.273) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; Wed, 19 Nov 2003 23:06:52 -0500

Message-ID: <[EMAIL PROTECTED]>

From: "Barrister Chiba Benson" <[EMAIL PROTECTED]>

Reply-To: [EMAIL PROTECTED]

To: [EMAIL PROTECTED]

Date: Thu, 20 Nov 2003 05:03:59 -0800

Subject: NOTIFICATION

X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM

MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

 

  NOTIFICATION OF REQUEST

Dear Sir

Iam solicitors of late Arshbishop Benson Idahosa and presently I serve as the legal representative of his estate=2E

 

When his will was opened and read sometime in 2002 the =3Edisposition contained therein include amongst others a pecuniary gift=28 fourten million five hundred thousand united state dollers =29 made to you =2E

 

However we =2Calong with some of his family members conducted further enquiry as regard to further identity of yours=2Cwe found out via his diary that you are the person in question ed=2E from the information at our disposal=2E According to the will he directed the sum of =2814=2E5=2C000=2C000=2E00=29contained in the UNION BANK PLC =2EThough he said he has not met you in person but he came across your contact through chambers of commerce due to your good and honest report=2Cand to will the said amount in your favour to facilitate the good work of God =2E Please=2Cas a matter of urgency and necessity to this letter pls reply me through to my eamil address=2E pls send us the following information as was directed to us by the director of the bank so that I can be able to apply for the aprovals before the transfer will commence to your account=2EI shall let you into a complete picture of this mutually beneficial transaction when I have received your anticipated positive reply=2E This matter should be treated as urgent and confidential=2E This is very important=2E here is the information needed from you urgently=3A

1=29 your telephone and fax number

2=29 your address

3=29 your account number=28 banking information=2E=29!!

Best Regards=2C

Barrister Chiba Benson

 

I have received the attached unsolicited e-mail from someone at your domain.

 

I do not wish to receive such messages in the future, so please take the appropriate measures to ensure that this unsolicited e-mail is not repeated.

 

Return-path: <[EMAIL PROTECTED]>

Received: from n2now74.com (212.199.108.218.forward.012.net.il [212.199.108.218]) by omega.netmds.com (Vircom SMTPRS 3.0.273) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; Wed, 19 Nov 2003 23:06:52 -0500

Message-ID: <[EMAIL PROTECTED]>

From: "Barrister Chiba Benson" <[EMAIL PROTECTED]>

Reply-To: [EMAIL PROTECTED]

To: [EMAIL PROTECTED]

Date: Thu, 20 Nov 2003 05:03:59 -0800

Subject: NOTIFICATION

X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM

MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

 

  NOTIFICATION OF REQUEST

Dear Sir

Iam solicitors of late Arshbishop Benson Idahosa and presently I serve as the legal representative of his estate=2E

 

When his will was opened and read sometime in 2002 the =3Edisposition contained therein include amongst others a pecuniary gift=28 fourten million five hundred thousand united state dollers =29 made to you =2E

 

However we =2Calong with some of his family members conducted further enquiry as regard to further identity of yours=2Cwe found out via his diary that you are the person in question ed=2E from the information at our disposal=2E According to the will he directed the sum of =2814=2E5=2C000=2C000=2E00=29contained in the UNION BANK PLC =2EThough he said he has not met you in person but he came across your contact through chambers of commerce due to your good and honest report=2Cand to will the said amount in your favour to facilitate the good work of God =2E Please=2Cas a matter of urgency and necessity to this letter pls reply me through to my eamil address=2E pls send us the following information as was directed to us by the director of the bank so that I can be able to apply for the aprovals before the transfer will commence to your account=2EI shall let you into a complete picture of this mutually beneficial transaction when I have received your anticipated positive reply=2E This matter should be treated as urgent and confidential=2E This is very important=2E here is the information needed from you urgently=3A

1=29 your telephone and fax number

2=29 your address

3=29 your account number=28 banking information=2E=29!!

Best Regards=2C

Barrister Chiba Benson

 

 

 

____________________

Matt Edwards

Net Doctors, Inc.

864-882-1650

____________________

 

 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.538 / Virus Database: 333 - Release Date:
11/10/2003


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.538 / Virus Database: 333 - Release Date: 11/10/2003


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.538 / Virus Database: 333 - Release Date: 11/10/2003

Reply via email to