On Thu, May 20, 2004 at 11:19:00AM -0500, Dale Haman wrote:
> Here is the complete header information that I have. I believe it is
> Postfix that is creating this because of the file attached to the
> message. Midco.net is a local ISP to me so if I can help clean this
> stuff off their network maybe it would improve the service quality I
> have at home.

[ snip ]

These are the headers that need to be looked at.

> ------------------------- BEGIN HEADERS -----------------------------

Don't believe the following.  It was inferred from other headers
by rhspam.umary.edu.  Like all machine inferences, it is suspect.

> Return-Path: <[EMAIL PROTECTED]>

Believe the following.  If you trust rhspam.umary.edu, which I presume
you do.  "info.com" is who the host that sent the mail claimed to be.  
Ihe IP number the mail was seen by rhspam.umary.edu to be coming from,
was 24.220.27.77.  rhspam.umary.edu looked up a hostname for that 
IP number in the DNS, yielding a listing of host-77-27-220-24.midco.net, 
presumably a dynamic IP.

> Received: from info.com (host-77-27-220-24.midco.net [24.220.27.77])
>       by rhspam.umary.edu (Postfix) with SMTP id 7A71973523;
>       Thu, 20 May 2004 08:12:59 -0500 (CDT)

Don't believe the following.  This was added by the host of origin
and is merely being passed on.  It's the easiest sort of thing 
to forge.

> From: [EMAIL PROTECTED]

Likewise, be sceptical about the following.  Think of this one
as who the addressee is at the top of a business letter.  It's
not necessarily who the letter was delivered to; that is set
by what's on the outside of the envelope.  Sometimes the 
so-called "envelope-sender" is preserved in a "Received:" header,
but not this time.

> To: [EMAIL PROTECTED]
> Date: Thu, 20 May 2004 12:39:59 UTC
> Subject: FwD: Mailing Error (3291)
> Importance: Normal
> X-Priority: 3 (Normal)
> X-MSMail-Priority: Normal
> Message-ID: <[EMAIL PROTECTED]>
> MIME-Version: 1.0
> Content-Type: multipart/mixed; 
>      boundary="======f4a54824ef4b.5e238"
> Content-Transfer-Encoding: 7bit
> -------------------------- END HEADERS ------------------------------

-- 
Dan Wilder

Reply via email to