I tackled this one last week, try taking one of these and call me in the
morning if things don't change ;)

Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/



Brian Godette wrote:
> Looks like there's more than just the Date field in the headers of
> this one. An opps in the forged Received line, random words on a
> forged X-Authentication-Warning, and a single letter X-Mailer.
> Matches could also probably be made on References and In-Reply-To.
> Also "houseboat SMTP" doesn't exist as far as Google knows, but
> chances are that's a random word replacement as well.
>
> Return-Path: <[EMAIL PROTECTED]>
> Received: from wnpgmb09dc1-77-214.res.mts.net
> (wnpgmb09dc1-77-214.res.mts.net [142.161.77.214])
>         by mailhost.idcomm.com (Postfix) with SMTP id 7BFFDA398656
>         for <[EMAIL PROTECTED]>; Fri, 26 Mar 2004 08:25:37 -0700
> (MST) Received: from [27.140.26.124] by 142.161.77.214 with houseboat
>         SMTP; %CURRENT_DATE_TIME
> X-Authentication-Warning: drugstore cackle compass
> Date: %CURRENT_DATE_TIME
> From: "Meghan Esparza" <[EMAIL PROTECTED]>
> Reply-To: "Meghan Esparza" <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: nuclear dc
> References: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> X-Mailer: m
> Content-Type: text/html; charset=us-ascii
> Content-Transfer-Encoding: 7bit

Attachment: 99_SARE_Random.cf
Description: Binary data

Reply via email to