At 2:49 PM -0600 8/31/2003, LuKreme (List User Kreme) wrote:
>On Aug 31, 2003, at 12:45 AM, Warren Michelsen wrote:
>>At 11:49 PM -0600 8/30/2003, LuKreme (List User Kreme) wrote:
>>>On Aug 30, 2003, at 11:19 PM, Warren Michelsen wrote:
>>>>
>>>>Received: from smtp01.infoave.net ([165.166.0.26] verified)
>>>> by mail.MDCCLXXVI.com (Stalker SMTP Server 1.8b9d14)
>>>> with ESMTP id S.0003132321 for <[EMAIL PROTECTED]>; Sat, 23 Aug 2003 08:45:36 
>>>> -0700
>>>>Received: from TRAVELER ([209.164.228.118])
>>>>by SMTP00.InfoAve.Net (PMDF V6.1-1IA5 #30771)
>>>>with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Sat,
>>>>
>>>>If so, then given:
>>>>
>>>>Received: from [209.194.92.34] (HELO ARLSAUCER)
>>>> by mail.MDCCLXXVI.com (Stalker SMTP Server 1.8b9d14)
>>>> with ESMTP id S.0003181674 for <[EMAIL PROTECTED]>; Sat, 30 Aug 2003 07:40:54 
>>>> -0700
>>>
>snip
>InfoAve.net received the message from TRAVELER ([209.164.228.118]) and you don't have 
>any way of verifying if any of that information is correct.
>
>Your only recourse is to blacklist 165.166.0.26.  If you want to complain to someone, 
>see if infoave.net has an abuse address.  Failing that contact the email addresses 
>for the whois record:

The headers supplied had nothing to do with a virus email, but were simply a case of 
multiple Received headers and served as an example to ask my message ID question.

The second example, Received: from [209.194.92.34] (HELO ARLSAUCER), does happen to be 
a virus source....


-- 
Warren Michelsen  <[EMAIL PROTECTED]>
Online Tools For Business --  <http://www.OTFB.com/>
Small Business & E-commerce web hosting


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to