Re: KLEZ or Sleaze

2002-07-10 Thread Matt Haught
I think it's spam. I've seen it a few times for a few weeks now. I've checked all the AV logs and haven't found any hits for it. - Original Message - From: Orin Rehorst [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Monday, July 08, 2002 10:13 AM Subject: KLEZ or

RE: KLEZ or Sleaze

2002-07-08 Thread Etts, Russell
Interesting I've been seeing the same thing. Thanks Russell -Original Message- From: Orin Rehorst [mailto:[EMAIL PROTECTED]] Sent: Monday, July 08, 2002 10:14 AM To: Exchange Discussions Subject: KLEZ or Sleaze Getting KLEZ-like emails. The From is spoofed employee address. Subject

RE: KLEZ or Sleaze

2002-07-08 Thread East, Bill
Probably a sleazy spammer (sorry, that's redundant). It's quite common to forge the from address. If your antivirus isn't going off you can know for sure. -- be - MOS You can't have everything. Where would you put it? -- Steven Wright -Original Message- From: Orin Rehorst

RE: KLEZ or Sleaze

2002-07-08 Thread Joe Pochedley
We've gotten a couple of these as well... Looks like it comes from another user at your own org... Pretty neat trick, confused a couple people here, but it's just another underhanded spammer... Grab the originating IP address off the header and head to www.dnsstuff.com and pop it into their

RE: KLEZ or Sleaze

2002-07-08 Thread John Strongosky
What I've seen is they are not using the helo/ehelo part of sendmail.this is what im getting in my sendmail logsauthentication-warning: [203.42.219.114] didn't use helo protocol john -Original Message- From: Orin Rehorst [mailto:[EMAIL PROTECTED]] Sent: Monday, July 08, 2002