From owner-freebsd-questions@FreeBSD.ORG Mon Apr 14 10:45:41 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5D31037B401 for ; Mon, 14 Apr 2003 10:45:41 -0700 (PDT) Received: from pursued-with.net (adsl-66-125-9-242.dsl.sndg02.pacbell.net [66.125.9.242]) by mx1.FreeBSD.org (Postfix) with ESMTP id 342A843FBD for ; Mon, 14 Apr 2003 10:45:40 -0700 (PDT) (envelope-from Kevin_Stevens@pursued-with.net) Received: from www.pursued-with.net (localhost.pursued-with.net [127.0.0.1]) by pursued-with.net (8.12.8p1/8.12.8) with SMTP id h3EHjdBR034700 for ; Mon, 14 Apr 2003 10:45:39 -0700 (PDT) (envelope-from Kevin_Stevens@pursued-with.net) Received: from 192.85.47.2 (SquirrelMail authenticated user imap) by new.host.name with HTTP; Mon, 14 Apr 2003 10:45:39 -0700 (PDT) Message-ID: <47654.192.85.47.2.1050342339.squirrel@new.host.name> Date: Mon, 14 Apr 2003 10:45:39 -0700 (PDT) From: "Kevin Stevens" To: freebsd-questions@freebsd.org User-Agent: SquirrelMail/1.4.0 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 X-Priority: 3 Importance: Normal Subject: Re: E-mail Scam, Addressess being collected of mailing list::Advice Requested X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Kevin_Stevens@pursued-with.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Apr 2003 17:45:41 -0000 >FWIW, spammers don't use "their" servers any more. They break into other >peoples computers to use. It's the only way they can deal with servers at >large ISPs that shut them off after so many messages. They switch IPs >almost instantly after the connection is shut down. That's also how the >beat blacklisting IP addresses. They don't even use their own or fake email addresses anymore. The latest twist is to mine legitimate addresses, and send the spam out with those forged as the From: and Reply To: headers. The actual content of the spam then provides a web address to contact for further info. This has happened several times with my Hotmail account so far (which I use exclusively for Usenet postings). I found out when I started getting bounce messages from the targeted recipient's mail servers. The bounced messages were totally bogus; they weren't sent from Hotmail's servers and had my Hotmail account forged in for the sender addresses. KeS