Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Aug 2002 18:39:50 +0930
From:      moeller@chemie.uni-hamburg.de
To:        Martin Moeller <moeller@bsdsi.com>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>, Maike Moeller <moeller@chemie.uni-hamburg.de>
Subject:   Re: I get mail from my own address!
Message-ID:  <20020819090950.GD64687@wantadilla.lemis.com>
In-Reply-To: <20020819105902.GA39997@piranha.bsdsi.com>
References:  <20020819105902.GA39997@piranha.bsdsi.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Monday, 19 August 2002 at 10:59:02 +0000, Martin Moeller wrote:
>
> Hello list,
>
> Yesterday I received a spam mail from my own email address. I assume that is
> a trick to pass through my procmail system or something?
>
> The header of the mail only shows this:
>
>
> -------- Ursprüngliche Nachricht --------
> Betreff: Mother finds 71K in 15 year olds closet
> Datum: Sun, 18 Aug 2002 19:22:09 -0500
> Von: moeller@chemie.uni-hamburg.de
> Rückantwort: moeller@chemie.uni-hamburg.de
> An: moeller@chemie.uni-hamburg.de
>
> <snip>
>
> This email was sent to you via Saf-E Mail Systems.  Your email address was
> automatically inserted into the To and From addresses to eliminate
> undeliverables which waste bandwidth and cause internet congestion. Your
> email or webserver IS NOT being used for the sending of this mail. No-one
> else is receiving emails from your address. You may utilize the removal link
> below if you do not wish to receive this
> mailing.http://www.andromeda-cr.com/remove.html

Hmm, come to think of it, this isn't the normal kind of spam.  I
haven't seen this particular thing before.  What else was in the message?

> What is that all about? How do they do that?

Oh, that's easy.  Just change the headers, like I've done here.  I've
also added an (undefined) Really-from: header:

Really-From: Greg 'groggy' Lehey <grog@FreeBSD.org>

Your MUA should show you that if you ask for all headers.

> And how can they (legally) be stopped from using my address? I don't
> really trust those removal links......

Don't use the removal links.  Ignore them.  The laws are still pretty
unclear, but in this case they've at least told you they're doing it.
If you follow http://www.lemis.com/lemisspam.html, you'll see that
most of it is malicious.

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020819090950.GD64687>