On Fri, October 6, 2006 9:18 am, Erik de Castro Lopo wrote: > Voytek Eymont wrote:
>> what is the giveaway sign ? the change in target address ? > > The fact the Receibed line after the one above said "by > symantecliveupdate.com" is not he same as 87.68.49.228.cable.012.net.il. thanks, Erik, and, thanks for the tutorial > http://www.stopspam.org/email/headers.html so, in this (new) header below: it's not forged as far as the originating host, is it ? (normally, my server rejects all dynamic IP servers) ---------------------------------------- Received: from pppoe-30.7.110.89-adsl.spbnit.ru (pppoe-30.7.110.89-adsl.spbnit.ru [89.110.7.30]) by koala.sbt.net.au (Postfix) with SMTP id B6C0E238A42 for <[EMAIL PROTECTED]>; Tue, 3 Oct 2006 17:46:35 +1000 (EST) Received: from 89.110.107.126 ([89.110.107.126]) by pppoe-30.7.110.89-adsl.spbnit.ru with Microsoft SMTPSVC(5.0.2195.6713); Tue, 3 Oct 2006 11:46:40 +0400 Message-ID: <[EMAIL PROTECTED]> Date: Tue, 3 Oct 2006 11:45:04 +0400 From: Bartholomew Valencia <[EMAIL PROTECTED]> User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: [EMAIL PROTECTED] Subject: frightening Content-Type: multipart/related; boundary="------------050403070807010800020208" Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 03 Oct 2006 07:45:17.0147 (UTC) FILETIME=[DE6D12B0:01C6E6BF] ---------------------------------------------------- -- Voytek -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
