On Tue, 15 May 2001, Jeff Kilbride wrote:
> I have the same question. All these messages have
> '[EMAIL PROTECTED]' on them for me. I was afraid
> that my system was sending virus alerts somehow, but I don't have
> anything from NetFolio installed on my machine. (that I know of...)
>
> Now I'm thinking that it just appends the domain name when I
> download the message, because I don't think these messages are
> originating from my machine.
>
> Any insight would be appreciated.
I too passed these on to my local net admins to ask them about it
(because, like your guys' situations, it looked like they were
originating locally). Best guess was that the local
system/relays/mail server slapped on a local hostname because the
"From:" address specified wasn't fully qualified. Meaning they
weren't really originating locally. Unfortunately, I don't have any
of the messages anymore to look at the headers more closely to see
where they were really from.
> ----- Original Message -----
> From: "Egger Lothar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, May 15, 2001 4:19 AM
> Subject: HELP needed for InterScan NT Alert
>
>
> > hello
> >
> > i talked to our sysadmins, but we don't have any Interscan Virus Wall.
> >
> > so why what or who uses our domainname for posting mail to this usergroup.
> >
> > in the mail header it looks like that mail1.netfolio.com sends this mail,
> > but why with a from: [EMAIL PROTECTED] ?
> >
> > any ideas ?
> >
> >
> > regards
> > lothar
> >
> > mailheader:
> >
> > Received: from mail.cardsys.at ([172.17.200.31]) by srv-csexch.cardsys.at
> > with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
> > id 2GH96AKV; Tue, 15 May 2001 12:24:05 +0200
> > Received: from apache.org (h31.sny.collab.net [64.208.42.41])
> > by mail.cardsys.at (8.9.3/8.9.3) with SMTP id OAA01953
> > for <[EMAIL PROTECTED]>; Tue, 15 May 2001 14:26:29 +0200
> > Message-Id: <[EMAIL PROTECTED]>
> > Received: (qmail 112 invoked by uid 500); 14 May 2001 22:03:59 -0000
> > Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
> > Precedence: bulk
> > Reply-To: [EMAIL PROTECTED]
> > list-help: <mailto:[EMAIL PROTECTED]>
> > list-unsubscribe: <mailto:[EMAIL PROTECTED]>
> > list-post: <mailto:[EMAIL PROTECTED]>
> > Delivered-To: mailing list [EMAIL PROTECTED]
> > Received: (qmail 99890 invoked from network); 14 May 2001 22:03:46 -0000
> > Received: from unknown (HELO mail1.netfolio.com) (38.136.195.106)
> > by h31.sny.collab.net with SMTP; 14 May 2001 22:03:46 -0000
> > Received: by mymail.netfolio.com with Internet Mail Service (5.5.2650.21)
> > id <285ZKVDQ>; Mon, 14 May 2001 18:01:18 -0400
> > Received: from gatekeeper1 (10.1.50.1 [10.1.50.1]) by mail1.netfolio.com
> > with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
> > id 285ZKVDK; Mon, 14 May 2001 18:01:12 -0400
> > From: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Subject: InterScan NT Alert
> > Date: Mon, 14 May 2001 18:05:53 -0400
> > X-Mailer: Internet Mail Service (5.5.2650.21)
> > X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N
> >
>
Milt Epstein
Research Programmer
Software/Systems Development Group
Computing and Communications Services Office (CCSO)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]
