Date: Thu, 25 Mar 1999 10:14:34 +0000 From: Karl Pielorz <kpielorz@tdx.co.uk> To: Wm Brian McCane <root@bmccane.maxbaud.net> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: E-mail spoof? Message-ID: <36FA0C8A.A590C261@tdx.co.uk> References: <Pine.BSF.3.96.990325035345.59847A-100000@bmccane.maxbaud.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Wm Brian McCane wrote: > > Greetings, > I got an email message with headers as follows: > > > Return-Path: <.@nest.se> > > Received: from ads.sellit-here.com (gamestation.maxbaud.net [12.13.66.202] (may be forged)) > > by bmccane.maxbaud.net (8.9.2/8.9.2) with ESMTP id DAA57205 > > for <bmccane@bmccane.maxbaud.net>; Thu, 25 Mar 1999 03:28:29 -0600 (CST) > > (envelope-from .@nest.se) > > Received: from laban.nest.se (laban.nest.se [194.52.146.70]) > > by ads.sellit-here.com (8.9.3/8.9.2) with ESMTP id DAA17168 > > for <bmccane@maxbaud.net>; Thu, 25 Mar 1999 03:28:15 -0600 (CST) > > (envelope-from .@nest.se) > > Message-Id: <199903250928.DAA17168@ads.sellit-here.com> > > Received: from laban.nest.se ([208.254.108.184]) by laban.nest.se > It would appear that whoever sent this machine may have used my machine to > send spam. I assume this because it has a "From: " address that is "on my > machine", ie. '.@ads.maxbaud.net'. > > 1) Did my machine relay spam? I don't think so - it just looks like they faked the From: address, e.g. similar to when you have an email arrive in your inbox that says "From: joe@public.com", "To: joe@public.com" (Makes you wonder what it's doing in your inbox until you realise it's SPAM... :-) -Kp To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?36FA0C8A.A590C261>