I think it's spam. I've seen it a few times for a few weeks now. I've
checked all the AV logs and haven't found any hits for it.
- Original Message -
From: Orin Rehorst [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Monday, July 08, 2002 10:13 AM
Subject: KLEZ or
Interesting
I've been seeing the same thing.
Thanks
Russell
-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 08, 2002 10:14 AM
To: Exchange Discussions
Subject: KLEZ or Sleaze
Getting KLEZ-like emails. The From is spoofed employee address. Subject
Probably a sleazy spammer (sorry, that's redundant). It's quite common to
forge the from address.
If your antivirus isn't going off you can know for sure.
--
be - MOS
You can't have everything. Where would you put it? -- Steven Wright
-Original Message-
From: Orin Rehorst
We've gotten a couple of these as well... Looks like it comes from another
user at your own org... Pretty neat trick, confused a couple people here,
but it's just another underhanded spammer... Grab the originating IP
address off the header and head to www.dnsstuff.com and pop it into their
What I've seen is they are not using the helo/ehelo part of
sendmail.this is what im getting in my sendmail
logsauthentication-warning: [203.42.219.114] didn't use helo protocol
john
-Original Message-
From: Orin Rehorst [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 08, 2002
5 matches
Mail list logo