On   Sunday, January 02, 2005,   Andy Fragen   sent forth:

>*This message was transferred with a trial version of CommuniGate(tm) Pro*
>------------------ RFC822 Header Follows ------------------

>From: <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Subject: Symantec Mail Security detected that you sent a message
>containing prohibited content and was classified as SPAM.               
>                        (SYM:11600384200103502059)
>Date: Sun, 2 Jan 2005 17:07:11 -0500

>-----------------------------------------------------------
>
>I got this as a response from somewhere to a message response. Any ideas?
>
>-- 
>Andy Fragen
>
>
>
I'm not sure I understand.  Are you saying that someone initiated an e-
mail conversation, you sent the 2nd e-mail as a response and got the
above (3rd e-mail) as a response from them?  If that is the case, you
will have to look at what you sent and ask their PostMaster about it. 
That organization might have tightened up what they accept by default.

Regardless of the above, there is another possibility.  A lot of virus
laden spam will mine their victims' address book for addresses to spoof
both "From" and "To" fields.  Allow me to suggest a possible scenario:

The virus on the infected PC picks your email address for the "From"
field and sends it off to an address protected by Symantec Corporate
Security type software.  Since it does not know the From field was
spoofed, it merrily sends back the response to you.

I have received several of these over the last year and a half on my work
account.  Fortunately, they come in waves, probably belonging to whatever
is the current virus family du jour.

Hope this helps!

 

--
Tim Lapin
[EMAIL PROTECTED] 
G4/AGP/400    OS 10.3.7    PowerMail 5.1     384 MB RAM     40+10 GB HDs



Reply via email to